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IN THE TRENCHES • by Schoun P, Pegan 


MacEnterprise, 


AND Behind ihe Macs at Yale 


I nterviewing Philip Rinehart; I spoke with Philip over the phone 
somewhere in the swamps of Jersey (with apologies to Bmce 
Springsteen). Philip Rinehart is co-chair of the steering committee 
leading the Mac OS X Enterprise Project (macentcrprise.org) and 
manages Macs as a support specialist at Yale University. 


Schoun Regan: 'lell me about your job. now aPfecrs more than $25 million, It means 2 lot more to 

Fhiltp Rinehart: 1 suppon the Macintosh compmeis Apple Marketing. 

thai students usi‘ and wharever software anti is on SR: The collaboration is really the key 

them, Vm iespQnsil>le for ilie care and feeding of ihem PR: Exactly, This then becomes a priority one instead of a 

if you will so that anyone can sit down at the l)ox wiih priority five, 

a relative degree of confidence that one, ii will work, SR: How^ would one join MacEnterprise? 

and two, Ll\at it will lx: secure. PR: Anylx^dy is welcome. You can have a deployment as 

SR: What about MacEnieiprLse? small as tO or as large a.s 10,000, we pretty niuch don’t care, 

PR: The goal of the project is for Mac IT prtjfe.ssionals To a certain extent, if you think about it, the difference 

to communicate and share information relating to the l>etween 10 and 10,000 isn’t as large as one might think. Tlie 

deployment of Macs in the enteipnse and really talk issues are essentially the same. We like to get the smaller 

abc.)ui what it means to drop it into an Active folks in I 7 ecau.se it gives them a voice, w^hich they may not 

Directory environment or a Netware environment, it's tHherwise have. 

a poc?) of knowledge,,,that fosters collaboration SR: Let's talk tech for a moment, Whafs tlie easiest way to 

ixlween MaciT professionals, shtxn an image t)ul back to other Macs? 

SR: Is it f>nmarily education based? PR: Use.,,either command line asr,,,nr Mike Ii{)mbich's 

PR; It started out as...primarily education NetRestore, They use a disk image and tlic'y humji it down 

based,.,hut we're trying to get more enteq>rise to the drive. 

involved. Part of It is tliat enterprise does not have SR: So I know on a PC using Ghost from Symantec, the 

large Mac deployments relative to educalion, and way the license fees are structured, it’s liorrible in my 

typically people who are doing these ,sorts of things opinion. And Apple’s? 

keep their heads down and stay off the radar so PR: As long a.s you own the operating system and have a site 

they don't get hammered for running .Macs. People license, you can do w'hat you w'anl. Now ilial asr is part of 

are posting from all sons of businesses and wv are the OS, it does not cost you a penny, 

trying to allow a way for them to communicate. SR: What alK>ut Radmind? 

SR: This gives your moR^ dour as a group with Apple PR: Pm a user of it niyseif, Ix-t’s say you have an asr image 

when an issue arises. from six months ago, you can take Uiat image and make 

PR; Hint's precisely it. One of die things we want in scjme changes, test it, and roll back if necessary to that 

launch is a bug tracking database wliich allows people perfect machine stale, 

to do the “me too" lactor. For example if 1 post a bug SR: Bingo. 'iTie word for today is RoHl)ack, 

about (auncM,.Ahen others can chime in. So ilicn a PR: And that to me is the biggest power of Radmind. If you 

problem that affects me with only Sx million in Macs screw' something up, you can roll back to the perfect image. 
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SR: C’mon, your users never screw soinetliing up. 

PR: (Laughs out loud for a long lime) 

Riiiiiiiiiiglu. 

SR: What scripting language is used by m{>si of 
the group? 

PR: Shell 
SR: AppleScript? 

PR: lliat too. 'I’he combination of the two and 
Automaier is exciting. 1 think Automaier has 
the potential to do some very cool things. 

SR: And scripring for you personally? 

PR; Tm a huge Python fan. 1 used to use PERL 
but now I love Python. 

SR: So what do you say to the high school 
teacher who wants to lock down the 
computers for their students? Do they need to 
know the command line? 

PR: lliere are tw^o ways off tlie top of tiiy head. 

If you are using some son of non<lirector>' 
setup, you can use the l^arental Controls, 'llie 
[setter way to do this would lx." using a 
directory .stnicture like Open Oireaory, which 
allows much more tlexahility on coniroLs. 

SR: If Apple were to eall you up and say, 

"'Pliilip, what one thing can we change on Mac OS X Server 
lo make it betler?" 

PR: Take Workgri3U[> Manager and give it a complete 
overhaul. Since half my life is spent in Windows, directory 
management Is a Icjt easier to use than Workgroup 
Manager. There are some paradigms that just don't work. 
Delegated OUs. I’ve seen ankles on AFP148 ami Michael 
(Bartosh) has sent me information on thus. I think they 
(Apple) have made it better but...want mc^re flexibility, 
SR: Same question on Client. 

PR: Hmmmmminmm. I would like to see an integrated 
groupware solution, I think the Outlook interlace w'ent 
out about 10 years ago, I think Apple could take their 
designers and come up with an excellent interlace for it. 
Mail, iCal, Address Book are nice, hut it needs to be 
better integrated. 

SR: What about Windows Server? 

PR: Thai’s a lough one, (Pauses) If Apple had better policy 
based management. Leverage insuiutional policies and 
group policies. 

SR: How would you walk into a Windows based company 
and sell them on Macs for their desktop machines. Convince 
them to swap their Windows desktops with Mac desktops. 
PR: To me, tPs TCO. IPs much lower on the Mac side. 

SR: Why? 

PR: Initial cost might Ixr more but continued support will 
be lower. I know that licensing comes into play ttx). One 
of tile other things I think about is the 
virus/malware/adware problem. The cost of l)uying and 
supportiiig the software to rid yourself of the,se prol)lcms, 
costs rntmey. Tho.se costs are not looked at is direa costs, 


( Vital Stats 


and they should l>e. You will likely buy Windows Server 
and now you have nn^re licenses, 

SR: I think what happens sometimes is that software 
purchasing after the fact is not rolled into the initial cost. 
If IT tnanagers c:an .swoon over low computers prices, 
then once they arrive, the '*1 need this and this and this" 
is now too expensive NOT to implement, liecause the 
computers are already there, 

SR: List tjuesiion. What are your \op five favorite movies? 
Movies that you could watch over and over and over again. 
No order is necessary, just the top five. 

PR: This is lough (laughs): llie 'Lhird Man, Citizen Cane, 
Kushmore, Midnight Cowboy, AjKicalyjjse Now. 

SR: Philip, thanks very much for speaking with us. 

PR: No problem Sdioun. 


About The Author 

Sdiom P. Regan is CIO of fflastnKHoa.com, 
wtttdi spetiaRzes in Mac 05 X tramiag and 
consoltiag. He speaks regutmfy to CIOs and 
CFOs on how to coatrol IT department 
spending, the myths surroonding cross- 
platform itttegratian, and the lunacy of 
expected lost revenue stemming from a colture 
bred to tiderate IT staff and operatiag system iaadeqoades as 
"aoTOHd". He seeks to diange s^HidfiWng IT departments that breed 
complacency for /Aw jobs and contempt for the end user, aather of 
wfnch are coadudve to business. 


Years in IT industry: 9 

Spoke at Macworld 2004 
Information: Philip Rinehart Is co<hair of 
the steering committee leading the Mac OS 
X Enterprise Project (macenteqirise.oi^ 
and manages Macs a.s a .support specialist at 
Yale University. He has l)een using 
Macintosh Computers since the days of tlie 
Macintosh SE, and Mac OS X since its 
Developer Preview Release. He presented 
on OS X .seairity at MacWorid 2004, and is 
an active member of the Mac OS X Lab 
project. He lias contributed to many areas 
of the project. Before coming to Yale, he worked as a Unix system 
administrator for a dot-com company. 

Computers: All flavors 

Programming Languages: Shell Scripting, AppleScript 
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Mapping the Evolution of QuickTime Programming 


T he QuickTime programming landscape looks pretty good 
nowadays. In terms of what you can do with QuickTime, the 
story has never been better. In the nearly 15 years since its 
introduction in December 1991, QuickTime has gained a truly 
impressive set of multiineclia capabilities. It now provides services for 
displaying and creating movies, capturing audio and video data, 
compressing and transcoding media data, broadcasting saved movies 
and live captured data across a network, displaying and modifying still 
images, and other tasks too numerous to list here exhaustively. With 
the recent appearance of QuickTime 7, the QuickTime programming 
APIs now comprise more than 2500 actively-supported functions. 


I Introduction 

I 

I Blit that of aiurse is only lialf of the stoiy, and 

j in miiny wiiys it is Uic jt.^ss intert^slin^ half. We 

? would expect this sort of continual feature 

^ expansion from any software architecture that has 

| lx:en around fcir a decade and a lialf. What is 
perhaps iitoie interesting is the wealth of tools that 
we as software develoi^ers can use to acress those 
multimedia t:apabilitie.s. For almost three full years, 
telieve it or not, tliis QuickTime Tooikit column has 
fcKTised more or less directly on the issue of how to 
use various different programming languages and 
development environmenis to construct QuickTime 
applications, WeVe built applications using a wide 
variety of alternate languages and IDEs, including 
C(x:oa, REALbasic, Revolution, Visual Basic, 
AppleScript Studio, Java, Tcl/Tk, and others, from 
modern objea-oriented appliattion frameworks to 
old-sch(X)I scripting languages, we’ve pretty much 
run the gamut of possibilities for developing 
applications and tools to create and modify and 
display QuickTime content. 
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It would be nice to pause and reflect on these t(x>ls and 
languages and to see how' they compare with one an cither in 
terms of ease-of-use and feature completeness and extensibility. 
It would also he nice to run .some benchmarks to see if some of 
ihese development envircmmenis produce particularly more 
efficient and resource-triendly applications than others. (Java, 
for in.stance, has a reputation for being slow; it would be nice 
to amially test our sample Java-ba,sed player application against 
our other sample applications.) But those reflections wall have 
to wtiit tor some other op|iorrimity, since in this article 1 want to 
discuss a somewhat different issue. In particular, 1 want to look 
at how QuickTime programming itself has evolved in the years 
since its introduction. What did it look like in the l^eginning, and 
what is its general character now? What sons of forc:es have 
pnimpled changes in the QuickTime programming model? 

I tliink that diis is an interesting set of questions because 
not every QuickTime developer — and in faa probably a 
minority of current QuickTime developers — has lx;en using 
QuickTime for a significant portion of those 15 years. In 
addition, most developers are probably using one or more of 
the QuickTime-sawy RAD tCK>ls or application frameworks. 
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Since none of tlie.se tooLs cir frameworks provides access to all 
the existing QuickTime capal)iliUes, it's likely tliat some 
Quicklime developers will need to venture outside the limits of 
their chosen tools to develop plug-ins or libraries for those tools. 
And then they land ,stiuaa.ly in the realm of those 2SOO 
functions. 

MacOS 

So let's begin at the beginning. Quicklime was originally 
released on the Macintosh Openiting System (specifically, on 
MacOS vetsion 6.0.7). Quire sensibly, the original QuickTime APIs 
were heavily dependent on the data types and structures used by 
the Macintosh Operating System and the Macintosh User Interface 
Toolbox. A chunk of memory' was typiailly specii'ied asing a 
Handle data type, atid files were tyj^ically specified using 
FSSpec ret'ords. Data to be drawn on the screen was accessed 
using bitmaps dmwn into grapJiics fxjils and graphics worlds 
(sj>ecifled using GrafPtr and GWorldPtr data ty|>es). Hie 
intention was very cle^irly that the (Quicklime APIs should fit into 
the existitig progmrnming model on Macintcjsli computers. 

At the same time, the QuickTime architects did no! liesitate 
to drive that programming model forward in certain important 
ways. One of the f>ig departures from exi.sting practices was to 
make C the language of cluiice lor developing QuickTime 
applications, in spite of the fact that Pascal still dominated 
MacOS software development during the time QuickTime was 
Ixdng developed. The original developer CD for QuickTime TO 
provided 18 sample projects using C but only half that many 
using Pascal. More tmportandyj the technicral documentation for 
QuickTime provided all sample code and reference material in 
C, not Pascal. Indeed, the btxiks Inside Macintosh: QuickTime 
and Inside Macintosh: QuickTmie Comlxments were the very 
first hooks in that series to relegate Pascal in the prtJgramming 
summaries at the end of the chapters. 

listing 1 shawls whar a t>^pical routine to open a movie file 
might liave ItKiked like. It uses the SUmdard File Package to 
display the file-opening dialog box to the user, and then it emails 
OpenMovieFile and NewMovieFromFile to create a Movie 
identifier for the data in llie movie file. 

Listing 1:1.oading a movie from a file 

Muvie GetAMovie (void) 

1 

OSErr myErr; 

SFTypeList mylypes = (KovieFileType, 0, 0, OJ: 

StandardFileReply cnyReply; 

Movie myMovie ' NtfLL^ 

short myRefNiiii]: 

short inyResiO = Q; 

EtandairdGetfiiePreviewtNIL, 1, myXypes, SrinyRepiy); 

if CmyReply.sfGood) ] 

rayErr = Op€nMovieFlle{&inyReply.efFlle. ;ktiiyRefNutn, 

fsRdPGrm)j 

if (myErr = noErr) I 


KewMovieFromFilel&myMovie, uiyRerNuni, ^rayResID, WELL, 
newMovieActive, NULL): 

Clo^eMovieFlle(myRefNu]ii) ; 

1 

} 

return tnyHovie; 

I 

One interesting tiling aliout this code Is that it is almost 
completely defirccated on current Macintosh ct^mpuiers. The 
Standard File Package never made the jump from the “classic'’ 
MacOS to Mac OS X, and (as we saw' in the previous article, 
“State Property 2'’ in MacTeeb, December 2005) the 
NewMovieFromP roper ties function is now recommended in 
place of NewMovieFromFile. After all, the parameters to 
NewMovieFromFile include {)dditit:s like a file reference 
number and a jxiinter to a resource ID, which are not standard 
ways of accessing files or file ckita on Mac OS X. 

It’s wort 1 1 remarking that first QuickTime developer CD also 
included a small set of HyperCard add-ons, called exlernai 
commands or XCMDs, that allowed I lyperCard developers to 
access QuickTime functicmality in their sUicks. This then marks 
tile first integration t>f QuickTime into what might lx called a 
rapid application deveSopmeni (liAU) tool 'Hiere were four 
XCMD modules: 

(1) Hie QTMovie XCMD, which could be used to play 
QuickTime movies in a window or directly onto the screen; 

(2) The QTRecordMovie XCMD, which displayed data from a 
video digitizer; 

C3) Tlie QTEdltNovie XCMD, w^hich supported editing 
operations on a QuickTime movie; 

(4) The QTPict XCMD, w4dch performed a varieiy^ of still image 
operations, including displaying a picaire on a card, 
compressing pictures, and allowing control over the clipping 
region of the card window'. 

(The perceptive reader will notice that, by pure historic:aI 
accident, one of these XCMDs shares Its name with die principal 
class in die new Cocoa QTKit framework, QTMovie.) 

Windows 

In the early 1990’s, Apple released a version of Qukk'rime 
(called “QuickTime for Windows”) that provided support for 
playing QuickTime movies on Windows computers. While it 
was a significant step forward, this version had some severe 
limitations. Most importantly, it provided a playback engine 
only; there was no way to create QtiickTinie movies on llic 
Windows platform. Also, many of the APIs for playing movies 
back differed from their Macintosh counterparLs. For instance, 
on the Mac, NewMovieController is declared essentially 
like this: 
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MovieContmll^r NeirfttovieController (Hovie theHovie. 

const Rect *iiiovieRect. long someFlags)- 


But under QuickTime for Windows, it had this declaration: 

HovicConttoller HeiirfMovieController (Movie theMovle, 

const LPRECT IprcHovieRect, long someFlags. 
IIWND hWndParent) ; 


Youll notice that the Windows version ttx>k an additional 
parameter (hWodParent) and ifiat tlie lypt- of the second 
parameter was a pointer to the standard Windows rectangle type 
(RECT), not the Macintosh rectangle type (Rect)- 

QuickTime 3-0, released in 199^, changed all diat. It 
provided a set of APIs tltai were virtually identical “ i!i both 
parameter lists and feature completeness ™ on Macintosh and 
Windows platforms. It w'as then possible to write Mac and 
Windows applications tluL used l)ie same source code, at least 
for the QuickTime-specific portions of the application. 

ITie magic provided by the Windows version of QuickTime 
3.0 was acctrmplished principally l>y a library called the 
QuickTime ^fedm Layer (or, more briefly, QTMl). llie 
QuickTime Media Layer provicle.s an implementation of a 
number of the pares of the Macintosh Operating System 
(including the Memory Manager and the File Manager) and the 
Macintosh User Interface Toolbox (including the Dialog 
Manager, the Control Manager, the Resource Manager, and the 
Menu Manager). In oilier words, QuickTime was ported to 
Window's mainly by way of tran.splaniing laige portions of 
system softw^are from the Mac(J)S to W'indows. 

For exisring Macinio.sh developers, this scheme had some 
profound Ixmefits. First and jbrernost, this greatly reduced the 
need to learn the intricacies of a new operating system. To 
display the standard Windows file-selection dialog box to elicit 
a movie file from tlie u.ser, a developer could just use the 
j'amiUar StandardGetFile functitin that he or she had been 
using all along on Mac<)S. And cu.stom application icons^ 
sounds, and IbnLs could be stored in resources, just as they are 
with MacOS applications. And existing Quicklime code could, 
as noted above, simply be recompiled for Windows 
applications. (Indeed, the code in Listing 1 would still compile 
and link just fine on Windows computers.) 

But for Windows developers, this scheme w^as less than 
optimal. It required working with unfaitiilrar data ty[)es, like 
Handle and FSSpec and GrafPtr, and also working with 
command-line tools to create resources or add them to 
application files. A better soluiion, wliich Apple and several 
lliird-parly developers t)ursued, was to develop Component 
Object Model (COM) plug-ins that support Quick'! ime APIs 
in Window^s applications. One type of COM object is an 
ActiveX control, wliich on display a user interface and 
process events directed at that interface. The developer can 
then suppon Quicklime in a COM-aware application (for 
instance, one developed using Visual Basic) by using an 
appropriate ActiveX control. For instance, Listing 2 shows 
some Visual Basic code to handle the Open menu item in the 
File menu. 
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Listing 2: Handling the Open menu item 

Private Sub FlleOpen_Click() 

□ijn aperiDlal Af; Kew DialogUindow 
On Error GoTo ball 

openDiai.CoimionDialogl/Filter = “AH Files (V *) | *. * |Hovie 
Files (• ,niov) I * .raov|Flash Files (* .swf)}" 
openDial.CeEQhQnDialogl^FilterIndex ^ 2 
openDial.ConiBujnDialQgl .Flags = 4 

* hide the “Read Only" check box 

openOialXomtitintJialogl .CancelError = True 
openOial .ConaunnOialogl .ShowOpen 

OpeoFile CopenDial.CotiimonDlalug] .FllaName) 
l]nl{^ad openDial 
Exit Sub 

bail: 

* the user pressed the Cancel button 

Onload openDial 
Ex tt Sub 
End Sub 


'llie FileOpen_Click liundlcr u.se.s standard Visual Basic 
meth(xLs, except for the application defined OpenFile method, 
shown in Listing 3- 

Listing 3: Opening a movie file 

Sub OpenFiletnicNm Ari String) 

Dim movieWind As New KovtaWindow 

If lan(fllaNm) -- 0 Then 

movleWlnd,Caption “ "Untitled" 

El Be 


DtovieWiiid. Caption = BaseNatnetfileNn) 
rM>vleWind,QTActiveXPluginl.SetOIlL (fileNm) 

End If 

mo vie Wind. Show 
End Sub 

Its important to note tiiat a QuickTiine-sawy ActiveX 
coniR)! does not so much remove the dependence on QTML as 
liide it. That is to say, although the Visual Basic developer 
doesn't need to know atMiut MacOS data types, the person who 
WTOie the AciiveX control does. And even the VB developer 
might need to know about Mac<])8 data types when using the 
declare statement to reference external procedures in the 
QIML library. This would happen if the developer needs to 
access QuickTime functionality^ that was not implemented in 
wliichever ActiveX control he or she is using. 

Mac OS X 

Quicklime's migration from MacOS to Mac OS X Is 
remarkably similar in spirit to its migration from MacOS to 
Windows. Once again, a software layer was added to support 
the Macintosh Operating System and User Interface Toollx>x 
managers that originated on MacOS and which are used 
extensively througliout tlie QuickTime source code. Mac OS X is 
a UNIX-based operating system anti provides no more native 
support for Quickl’inie than dtxrs Windows. In this case, the 
implementation of the Macintosh Operating System and Textibox 
managers is prov ided by a library called Carbon^ The i>nly real 
difference lietween Q'l'MI. and Carlion is that Carbon has 
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evolved more swifily than QTMl. For instance, as menlioned 
earlier, the Standard File Package has long since been 
dcfirccated on Mac'intosh computers, having been replaceti by 
the Navigation Services (wlrich siipp<iits longer filenanics and 
alternate text encoding scliemes such as UnicodeJ. 

The move to Mac OS X has protiiptcd two additional sorts 
of changes to Qni<'kl'ime APIs, above and beyond the changes 
required for it to keep [>ace with enhancements in the Carlx )0 
library. First, a reasonably extensive Ctx'oa framework, QTKit, 
was developetl to replace the existing QuickTime-related 
classes, NSMovie and NSMovieVlew. We investigated QTKiL in 
sevenil recent articles {MacTech^ May, June, and July 2005) and 
saw^ that we can develop full-featured CcKoa applit:aiions with 
only minimal need to venture outside of die meilKxls it 
provides. And venturing outside of CcKoa is easy, I'lecausc 
Ohieclive-C is a superset of ANSI C. This means that we can 
easily call Carixm APIs within our Cocoa code* Ftjr example, 
Li.sting 4 shows a tneihocl for setting the magnification level of 
a Flash movie opened using QTKit. Notice that we call 
GetMovieIndTrackType to find the first Flash track in the 
movie, and then we call GetTrackKedia, 
GelMediaHandler, and FlashMediaSetEoom to set the 
level of that track. 

Listing 4: Setting the zoom level of a Flash 
movie 

- (void}setZoom: (f loat)?iaDtifFct 
\ 

Track flasliTrack - NULL; 

HpAU flnshHcdla = NULL; 

loHandler flashHandter NULL; 

flashTrack « GatMovlelndTrackTypet[self quickTimeMovie), 

U FlasKMcdiaType, movieTrackMediaType | 
tiovi eTrackEnabiedOTily) ; 

if (flashTrack) | 

fiafsHMedia " G{?tTcackHedia(flashTrack): 

flaflhHandler ” GetMediaHandler(flashHedia): 

FlaatiHi?diaSetZootii{flaabHandler, zootnPet): 

I 

1 

*llie second princijxil way in which Mac OS X has affected 
QuickTime, on the API level, is die adiipiion with in QuickTime of 
Core Foundation data types, Cbn? foundation Is a procedural C 
framework that is mcxleled an the object-oriented Foundation 
framework in Cocoa. It provides, amting other tilings, some very 
nice collection classes (such as anays and dictionaries) and 
Unicode-compatible strings. Quicklime 6.4 introduced, for 
ipLStance, several functions for cTcaiing data references from Core 
Foundation cLita types like CFString and CFURL, including 
these; 

QTKewDat a f e r Phc e F r oniFull Pa t hC FS t r in g 
QTKewDataRe f e reric eF romURLCFStrin^ 

QTNcwDa take ferenc eWithDirecto ryCFString 

And we saw in an earlier article (“State Property” in MacTeeb, 
Novemlnir 2005) that the QuickTime property function 
QTGet Mo vie Property Info can return reference-counted 


tAACtm 


Ct>re Foundation objects that need to lx? released (by calling 
CFRel 0 ase), Interestingly enough, these Core Foundation data 
types and functions are suppfined now on Windows as well as 
on Mac OS X. 

Conclusion 

So where do we stand liere in early 2006? 'Fhe good news 
is that Apple and third-party developers have invested 
considerable resources into making sure that die major 
programming tools and development environments supixjrt 
some level f>f Quickl ime movie playback and editing. Moreover, 
the QuickTime APIs have kept pace with changes in the Carbon 
library and have exjjanded to provided support for Coctxi and 
Core F<)iindation programming paradigms. 

Tlic bad news, if there is any, is that some irnpottant parrs of 
QuickTime are still accessible only using funaions and data types 
are arose on MacOS, a now-de[)feealed operating system. It would 
lx: nice to never have to allocate another Handle objtx:!. We aren’t 
quite tliere yet. But surely .some day we will be. 
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Core Data 



storing Fetch Requests 
in your Data Model 


Introduction to 
Core Data, Part IV 


By Jeff LaMarche 


In the last Core Data article we talked about creating Fetch 
Requests programmatically using format strings and predicates. 
Using format strings to create Fetch Requests is a little bit inelegant, 
although it does give you a tremendous amount of flexibility. For 
your day-to-day, run-of-the-mill data fetching needs there is an 
easier way that gets those format strings out of your compiled code. 
You can create Fetch Requests right in your data model. This 
month, we’re going to take a quick look at doing just that: We’re 
going to build Fetch Requests and predicates right in Xcode and 
then look at how we get those Fetch Requests from our code. 

___ y 


Introduction 

In Xcodc, I wunl ahead and built a simple data model 
witlj a single entity called Person ihat ctmtains two siring 
attributes called firstNainv and iaslNume, and a date 
attribute called hirihOate. 1 also gave the eniiiy a to-one 
relationship called spouse that can conneca this entity to one 
other Person entity. I'll he using this simple data model to 
illustrate my points in tlie rc,sl of this article. We’ve already 
discussed crealing data models hack in the first part of this 
series (Intro to Core Data, July, 2005), so I won't he guiding 
you through crealing I he data model this month. If you 
create a new project in Xcode using ilie Core Data 
Applimiion project template, you should !ie able to quickly 
create the same data model yourself, or you can simply 
download rny project from the Mac'J'ech FTP site. You might 
want lo do that before you continue with die article, as HI 
be making frequent references to tltis data model, however 


it is a simple enougli data model that you can probably 
follow along wiiliout it. 

Stored Fetch Requests 

If you search Apple’s dtxit mental ion for infonnation on 
liow to store Fetch RetjuesLs in your data mtxJel, you mighi 
come to rhe conclusion that it simply ain't lye done. The ability 
to store Fetch Requests as part of ihe data model, although 
present in Core Data's predecessor Enterprise Objects 
Framew'ork, seemed to l>e absent fmm the data model editor in 
Xcode when Core Data was first released. It was actually there, 
but it just wasn't very obvious; you had lu change the view 
settings for the properties pane in order to see or work wiili 
Fetch Requests (Figure 1). Tile official documeniation spends so 
lit tie time on the topic that it's very easy to Tnis,s it. 
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Figure 1. Getting to the fetch requests stored in your 
data model. 


With the recent release of Xcode 2.1, however, the ea^jlc- 
eyed among you have proirably noticetl that a fourth option has 
I’jeen added to the pro[)crty pane’s mki (plus sign) pop-up menu 
in the data mtxlel edtior (Figure 2). Unlike with earlier releases, 
this option now shows up regardless of whether youVe changed 
the pane to show Fetch Request or nut, Tliat makes the 
fiincrionaliry a little more obvious, and a little easier to access. 



Figure 2. You can now add a fetch request when looking 
at the properties pane in any view mode. 

If you tiec'icie to store fetch requests in your data model 
(and you should), you still have to know^ about predicates and 
format strings. All that iiifonnation I gave you in the Core Data 
III anicle back in November was not for naught. Without a stjlkl 
understanding of formal strings and predicare-s, you woukin't l^e 
able to use the functiomility we’re going to go over this month. 
See? lliere is a methexi to my madness. 

The Predicate Builder 

The way that we build Fetch Requests in XctxJe is to use the 
Predkati' Builder. This is a ttxjl that is built into Xaxle's data 
model editor, and is u.scd for visually creating predicates (and 
the format string that they’re based on), Wliy don’t you go ahead 
and seleci ilic Rnson entity in your cktta model, then press the 
little plus sigti in llic projx'rties pane (the lop-middle pane). 
Select Add Fetch Request from the menu iliaE pi>p^ up 


(Figure 2). You’ll get a new Fetch Ret[uesi, which you shtruld 
go ahetid and rename to olderThanSpouse in tlie top right pane. 
We are going to create a predicate that brings back all jx^ople 
who have a spouse and are older than them. 

When you edit the name of this Fetcli Request, you sliouid 
see a button lalieled Edit Predkak down Ixjiow w^here you 
change the name, Tliis Ixiium will call up the Predicaie Builder. 
The large text field above the Edit Predkale button will show- 
you the format-string associated wdth any predicate you build 
with the Predicate Builder Although it kx>k.s like you should be 
able to edit the format string there, you actually can’t, though 
you can select it and copy to the cliplx^arcL 

^ F«cb Request 



Figure 3. You can get to the predicate builder by pressing 
the Edit Predicate button when the fetch request is 
selected in the properties pane. 

Go ahead and click that Ixuton u> bring up the Predicate 
Builder, *lhis interi'ace probably looks faniiliar to you, at 
Ica.st if you’ve ever set up a rule in Mail, or defined a smart 
playlist in iTunes or a smart album in iPhoto, Predicates are 
built using a fairly standard-issue Apple rules interface 
(Figure 4). Almost, IFs a very functional interface, but it’s 
not as inluiiivc as the ones youVe probably used, 'I'here’s 
actually a little bit of hidden functionality in there, so let’s 
take a closer look at it. 


^ *. uiUtim rjQoop*M ':! 0 @ ! 
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Figure 4. The Predicate Builder 

Starting from the left side, the first thing you'll see is a 
pop-up menu. This is the kejf pop-up menu, sometimes 
simply referred to as the left band side menu. This is where 
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you define whai you're comparing or, in other wurd^s, the 
left side of the format string. Most often, youVe going to 
select one of the attributes of your entity. If you click the 
pop'Up menu, you 11 see that you have more options to 
select from than just the atiribuies of die current entity, 
however (Figure 5). 
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Figure 5. The key pop-up menu. 

The top-most item in the menu is labeled Expression. 
You won't find this option wcll-dtK'uinenied anywliere 
unfortunately, liui it's a very handy one nonetheless. This 
option changes the whole line to a single eciitable text field 
where you can plug tn a format siring. Why would you want 
to do thad* Well, there might l^e times when you need to access 
a properly using key-value coding that the data model editor 
doesn't know about, perhap.s because you’ve created an 
attribute and left its type as undt^fined. Basically, if you know 
about an attribute that Xcode doesn't know about for any 
reason, you can use this option to manually enter die ftmiial 
string for one pan of the predicate. In praedee, you probably 
woo’l have to use this very often, but it’s good to know it's 
ilicre in case you ever need it. 

'Ihe next option, labeled Select Key„, lirings up a 
browser to let you select an attribute. Tills might seem a little 
redundant, since tlie individual attributes of this entity are also 
available right in the p{>p-up menu, but ytiu might liavc noticed 
that the sfmme relationship was not accessible there, because it's 
not an attribuie. Altiiough this option can lie used just to .select 
an attribute of this entity, the primary reason it exisLs is so that 
you am drill down into other entities through this entity’s 
relationsiiips. Let's say we wanted to create a fetcli reejuest based 
on the biitlulay of the person’s spouse. In that case, you could 
use the Select Key.., option, click on the sjxjuse entry in the 
lefr-mtjst column^ then dick on the birtbDate field in the second 
column (Figure 6). Don't actually do that, however. Click the 
Cancel bunon; 1 don't warn you to actually select the spouse's 
birtbDate field Itere. 
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Figure 6 p Selecting attributes of a relationship using the 
Select Key... option. 

The next few options are firctty self-explanatory; they are 
simply the attributes of this entity that you can select 
ifirslName, ia$tN<4m€, birtbDate) The options in die next 
section Mow the attributes allow you to add additional 
criteria to this rule. Here's where we stait to see a deviation 
from the standard-issue Apple ades dialog. Tn most rules 
dialogs, such as ITunes' smart playlist dialog (Figure 7), you 
define a simple list t>f criteria and choose to require either all 
of the criteria, or any single criteria in the list. 
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Figure 7. The smart playlist rules dialog from ITunes. 

The Predicate Builder allows y{>u lo create much more 
complex and roliusi rules iluin ilic rule dialogs in Apple’s 
consumer applications. You can use all tliree of the .stanclard 
BtKjlean operators (and, or, not), and choo.He a different operator 
for each pair of openilions. You can also set precedence by 
creating a hierarchy t>f crilLMia. 

Tlie four Add options under the key pop-up menu all insert 
another oiterion into the predit:ate, and functit>n almost exactly 
the same. The rmiy difference in tlie options, is which of the 
Rooleim t>pcraiars is used, although that can be changed after 
the fact. Tlie Ixittom-most Add option is the same as pressing tlie 
plus button on the righi-hand side of the row or the Add ANT) 
option. You can UH>k at Figure 8 to get an idea of the son of 
complex rules you can build using the Predic ate Builder. Tlie last 
option on die left-hand side menu simply removes the row and 
funnions exactly like pres,sing the minus button on the right- 
hand side of die row. 
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Figure 8. Crafting a complex Fetch Request in the 
Predicate Builder. 

As we move to the riglii. the next pop-up menu is the opemtor 
to he usetl for hiLs mw. Tlie available openitors change depending 
on the type of attribute selmed in the key pop up menu. DifFeient 
options are pre-sented. for example, when you select a string 
aiirihuie than when you select a numl'^er or tkire attril^ute. 

Last, l>ut not least, the next field over is simply the value to 
l>e compared when evaluating this criterion. Tlie example in 
Figure 8 shows a numlKT of comparisons Ix^ing made, but 
they're all being made to ct>nstant values typed right into this 
field. That's useful, but noi always wlial you want, 'lb be really 
useful, you'd need to lx* able to plug in values at runtime or, 
perhaps, compare one attribute to another. But iheic dcxsnT 
seem to be any way to enter anything other than a amstant here, 
does there? 

Well, here's a bit of hidden hmaionality* Go ahead and 
ciiher right-click or control-click in the space to the left of the 
minus button thiit's used to delete the row. Lo and behold, you1l 
be presented wiih a cuntextual menu with some new 
opiionst Figure 9X 
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Figure 9. The hidden contextual menu. 

The bottom five options are exactly the same as ones you 
saw in the left-hand key pop-up menu. They add or remove the 
ament row. The top three options, liowever, are the magic 
options. Tliey allow you u> select the types values for the riglit- 
hand side of tlie ecjuation. The default value, as yotfve seen, is 
Constant, which allows you to specify the aHii]>arison value 
right in lire i^reiiicate Builder, 

1 jet's skip dje second option {Vmiabk) for just a ,set;and. 
Well come Ixick to it in a moment, but it's more involved than the 
other two, so let's k)ok at the thiixi option first. Go ahead and 
selea Key. Doing that, vvtil change the place witere you used to 
lx able to enter a coastant value into another pop-up menu that 
l(K)ks identical to the left-hand side pop-up menu. Tliis is die 
right-hand side key pcip-up menu. Tliis can lx u,seful in many 


situations. We stated dial we were going to create a Fetch Request 
to retrieve all people who are older than their s{x>use. Easy^ 
enough. Just chooser Sf^iect Key... from die right-hand side pop¬ 
up menu and drill down to the spouse’s birthlJate as we did a 
iiiument ago on the left-luind side. Next, change Uie operator 
pop-up menu to greater-dian and make sure birthDate is 
selected in Uie Icft-liand key jiop-iip menu. (Figure 10,). 
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Figure 10. Comparing a key to another key 

Go ahead and click die OK liutton; this Fetch Request is 
done* You can Lake a look m the Predicate: field lo see the 
fonnat string you just created. Now, let's create a little more 
complex Fetch Request. Go ahead and click the plus burton In 
the lower left of ihc Fetch Rec|uesl pane (the top-mkidle pane 
of the data model editor). When you added a Fetch Request 
Ixfore, the Property pane turned into the Fetch request pane, 
so this time, you can just click the plus button and don't have 
to selea from a pt>p-up menu. When the new Fetch Request 
efjuies up, rename it to birtbOateBetweenf then click the Edit 
Ffvdicate burton to get back to die Predicate Builder. We're 
going to build a Fetch Retjuest to retrieve all people with a birth 
dale fxtween two values* but we don't w^ani to specify those 
two values until runtime. 

let's now talk alioul the second option on the contextual 
menu: Variable. If you coiitroFclick to the left of the minus 
button again and select that option, you'll get an editable text 
field labeled Variabie (Figure 11), This is where the juju 
happens, baby. In this field, w^e can specify a variable name and 
later well be able to replace that variable with another value in 
our code. 'Ibis t.s called a snbstHuHon variable or sometime.s a 
hind mriabie. This i.s what makes stored Fetch Re(|uesLs 
dexihle enough to use for just about everything. If you specify 
a valtie here - wliich am be just about any siring value you 
wish to use - you will iheu Ik.- able to substitute any other value 
of your tTujosing when you retrieve the Fetch Rettucsl from 
your data nicxlel. 

If youTe pLiying aking at home, gt> ahead and change the 
operator pop-up menu from = to within, which will add a 
second rw to this criteria. The new row is noi a new criteria* 
but just a second parameter to the existing one. The within 
operator allows you lo search IxLscd on a date attribute that falls 
between two other date values. Control-click to the right of the 
new row that got entered and change if also to variable. 
Now, go ahead and assign each of lliosc variables a name. I 
chase EROMDATF and TODATE, as you can see from Figure 11, 
Once you've got it set up, click the OK button. 
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Figure 11. Specifying a substitution variable in 
Predicate Builder. 

After the Predicate Builder in di.stiii'ssed, go ahead a ad kK>k 
at that large text field labeled Predicate:. 'Iliat will show you ilie 
formal string that will lie used for creating this Fetch Request. 
Notice the dollar sign in frx>ni of ROMDATE and ^OIRUDAll? 
'I'hat's how siilistilulion variables are specified in format strings. 

Crt> ahead and save your data model and let's lake a kK)k at how 
we can pull our Fetch Ref[uest out of iJie diila iiitxlel inste:td of 
leaving to create them from scratcli, we did in tlie pievioiis aiticle. 

Getting Fetch Requests Out Of the 
Data Model 

Technically sj>eakingt you aren't storing a Fetch Request in 
your data model, even though it's usually referred to that way. 
Your clata mcxlei is not like a nib file, where sermliztxi objetis are 
Ix^ing stored. lastead. what's really happening is you are creating 
a template from which a new Fetch Ret|iicst can be instantiate at 
nin time, 'rhls Is a relatively straight ftirward process. 

One thing that might trip you up is the faci that you don't 
u,se NSMangedObjectConteKl to retrieve your Fetch 
Requests. If you’ve been using Core Data for a little while, 
you've probably gotten accustomed to using the context for 
retrieving, insetting, and editing your cbita. A Feltii Rec|uesi, 
however, is not data. It's part of y<mr data model, Therefore, 
instead of using the context, you have to use your managed 
object m<xlcl (NSHanagedObjectModel) to retrieve your 
Fetcli Requests, Ffinunately, the majiaged object model is 
available through an accessor method that gets creaied 
automalirally for you when you use one of the Ca)re Data t>n>ject 
lem(>lates. In a Core Data Applinilion project, you can get the 
managed object itkkIcI using the managedObjectNodeJ 
method of the application delegate class 
{appfkaiionName_AppDeIegate). In a Core Data document- 
based application, you list? the same method, but call it on your 
doc'umeni class instead (which inherits the methtKl from 
NSPersistentDocument). 

Once you have a reference to your managed olijett model, 
it's simply a mailer of asking it for your Fetch Request by name. 
If you aren't using substitution varkibles, it's very easy. Here's 
Ikiw we would get fliai first Fercih Request we created: 

Cietting a Fetcli Request from your data model 

MSHana^cdObjectModel *iiodel * maiiagBdObjeclHodel ]; 

RSFetchRequest 'fetch 

[model fetchRequostTenpIateForMaine:@"olderThaoSpoiise'']; 


Tliat's aQ diere is to that one. After this call, you're ready to 
fetch data from the context. 

On the other hand, if you have specified suKstitution vsiriahles 
in your Fetch Request, then you have to buM a dictionary' 
containing lire substitution varhible names as llie key valuer, and the 
values you wish to replace them witli as the corres[X)nding objects. 
In (Hir case, dial meuas creating an NSDictionary willi two 
eniric’s. One with a key vtilue of @"FR0MDATE" and aiiotlier widi a 
key value of TOD ATE**. Tlie c^ijecis to Ijq p^iased for botli of these 
keys need to be NSDate oliject instances since we are t:omparing 
widj a dale field. If we were comparing a numeric Held, we'd use 
NSNuonber; and if were tximparing a string field, we would use an 
NSStrlng. Here’s an example of getting our .setxind Fetch Re(]ue.sL 
mil of the data mtxlei: 

Getting a Fetch Request with substitution 
variables 

NSManagedObjectModel 'modnl * [self mauagedObjectHodel]: 

RSDate 'fjTomDate = [NSCalendarDcite 

dateWithNaturslLanguageSirlTig.:0'‘W 1 / 2n04"l: 

NSData 'toDate “ [NSCalendarDate 

dateWithNaturalLflfiauageStrinB'@"12/3l/2004''] : 

NSDictionary 'subs « [NSDictionary 

dictiooaryWi tbObJectsAndKeys: fromDate. §"FR0HJ3ATK*. 
toDete, ^"TOMTE*. tilH: 

KSFetchHequest 'fetch 

[model fetchRequestFromTejnpls^ eWitbName: 

&“birtM>ateBetween" substllutionVarlablesisubsl; 

Once eitiler of these two chunks of code fires^ you w ill liave 
a pointer to a Fetch Request, It Ls exactly the same as if you had 
created it using a format string and a predicate like we did in die 
previoiLs article^ but with less cr>de and without having die 
formal string inside your compiled application, 

Condusion 

-Storing the definition of your Fetch Rerjuesrs inside your data 
motiel 1ms many ativantages. You can use the l^iediatte Builder to 
mfia" t?;i,sily liuild complex criteiia it allows you to move fxiienually 
cximplex fonnat strings out of' your cximpiled code and into your 
data mrxIeL It also allows you to use bind variablei to let yixi alter 
your Fetch Re<jiic‘st,s' at runtime Ixised on user-provided data, 

Tliese tools provide you with the aliility to tivule and use just 
alxuit any tyjx? of Fetch Recjuest you niigiii need liglit in your cbita 
mcxlef and there is very Itille leason in mast situation not to use it. 
Unfortunately, die ftict the ftinctionality^ was .sort of .squirreled 
away wheie it vc^isn't f^wious it is jTrolxtbly being undeaLsed, 

Ixit now ihn you where it is and liow to use it, you ran gp aiiead and 
gti all thojx- yueky fonnat .strings ;ind predicates out of your exxie. 

At I 
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Lasso Professional Server 8 

the fastest, easiest way to tie any database to any website on any platform. 


Lasso Professional - the next generation of building data-driven Web sites - is 
simply the fastest, easiest way to tie your databases to the Web. It supports multiple 
databases simultaneously, eases the sequential migration of databases and it's fully 
supported on Mac, Windows'and Linux. 


4 FREE well commented Lasso 
solutions to get you started: 

Blog: Teaches beginners and advanced users 

alike how to create an online diary, or web log, 

QuickPoll: Add a poll to your Web site with a 
question and answers, cast a vote or see results. 

Collaborate: Enables knowledge sharing among 
a group of developers and administrators to 
streamline Web site development from remote 
locations or geographically dispersed teams. 

Message Board: Source code for the 
Message Board solution is completely 
open and expandable to suit your needs. 
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Try Lasso Professional Server 8 
FREE for 30 days. 



WWW, TryLassoxotn 
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Then get 60 days of free 
support with your purchase. 



















CRYPTOCard’s CRYPTO-Server 6.3 for OS X 


Eliminate Insecure Static Passwords 



It is no secret that static passwords are the weakest link 
in the security chain, bui until recently, there really was no 
Mac-specific alternative. That all changed when 
aullientication technology vendor CKYKrOCard released its 
first two-factor authentication solution for OS X Panilier at 
Mac World 2004 - winning a MacWorld “Best of Show'* award 
in the process. 

CRYFrOCard has now launched a new version of its 
CKYl^rO-Server authenticaiton solution 
fov OS X Tiger. Again, llie Irasic 
ptvmise of this technology is simple - ii 
replaces inherently weak static 
passwords wit ft secure twoTactor 
authentication. To log on to a 
protected nettvork or resoiirce, a ii.se r 
must combine their security PIN 
(jK^metbing t>nly they know) with a 
one-time passcode that is randomly 
generated by their token h>r eiu h logon 
(something only they have). 

The new version of CRYPTO- 
Server does a gcxxl job of leveraging 
Tiger's robust support lor smnn card 
environments, btit users can also opt 
for PIN pad tokens, key chain fokeas, 
or software tokens* Racfi fonn factor 
offers unique advantages and 
characteristics, enabling organiztitions 
to tailor their aurhentic'tilion solution 
according to tlieir own needs. Hardware tokens feature field- 
replaceable batteries that can lie swapped in-sei%'ice to extend 
device lifespan indefinitely. 

We are pleased to report that our experience testing the 
new Tiger product was a good one. 'I'he CRYPTO-Server 
package contained everything required to set ui> the 
solution, and the in.sirnc lion manual was clear, accurate, and 
easy to follow. The product emphasizes ea.se-of-use and 
tight integration with Apple's Open Directory PDAl^ services 
and as a result, installation was straightforward and relatively 
painless. There arc also features that will simplify 
implementation in a real-world environment, such as a .self¬ 
enrolment component called CRYPTO-Deploy, which 


enables users to remotely a.s.Hign and activale tlieir hardware 
tokens via a Wel> page. 

Once tile CRYi^O->)eA'er install is completed, a user will 
need to instan the CRYPTO-Console rntnlule, an intuitive 
Graphical User Interlace (Gill) whicti provides the management 
interface to CRYPTO-Server. CRY FI O-Console enables 
administrators to manage tokens, u.sers (in non-LDAP 
deployments), and groups, w'hile also providing server 
licensing, system configuration, and 
rejxirting hmetions. 

The CR^IH^O-Console interface Ls 
well thought out and easy to navigate, 
providing administmiors wilh scTcens 
for viewing/ediling users, tokens, 
containers, objects, and attributes. 
Search functions accept regular 
expressions for ease of ti.se and the GUI 
archileclure is logical and inruirive. 
Detailed management oprions are 
available by highlighting an object, and 
then CtrLclicking it to display drop¬ 
down menu items. 

The solution appears to he 
extremely flexible, and can easily be 
enhanced and expanded with a variety 
tjf agents and plug-ins ilial extend 
strong two-factor auiheniicaiion to 
existing Web, mail, aiKl other security 
appliance infrastructure nodes. For 
example, the CRYl^TO-Logon for .Mac OS X c’omponent makes 
it easy for Mac users attempting to gain secure LAN, Web, or 
remote access to aLuheniicaie diem.se]ves by simply insening 
their smart card and entering thetr PIN, 

All CRYPTO-Server tokens generate a unique password 
for every logon attempt, which makes stolen credentials 
useless to hackers, while simuitaneously ensuring Tiger and 
Panther users do not have to memorize com|)]icated 
credentials. CRYPl'OCaid points out that this can 
significantly retlute tlie help<lesk costs associated with 
password management while simultaneously eliminating the 
obvious security risks of "shoulder surfing** and users wanting 
down their passwords. 
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CRYPTO-Sltv'ct Ls ii\m Liic fir.st soliidcm wt^ have tested that 
supports iwofactor aulhcnticurion for Apaclic Web servers via 
its CRY FI O-Web component. (If you know of others, please let 
us know!) IJsin^ CRYPTO-Web we were able to secure a 
website, and then authenticate to it with a conhgured token. 
CRY FI O-Web should make it a simple process for administrators 
to secure websites by requiring users to authenticate with their 
token in order to gain access. Companies can also leverage oui^ 
obthe-lx)x interoperability with netw^ork entities that provide 
native RADIUS supporl. 

Unlike CRYPTOCard’s original OS X offering, which only 
provided client side authentication, the latest version of 
CRYPTO-Serv^er for OS X also provides enterprise-ready 
functionality like "High Availability" which utilizes real-time 
multi-master replication functionality' to ensure there is no single 
p()int of breakdown by switching to a replica server in the event 



of system failure. TTiis is imporrant as it means that die 
audientication soiuiion can now meet the security needs of any 
sized organization. 

Another unic|ue feaaire of CltYPrO-Server is that it offers 
crosS“platform capability. This is important news for the 
majority of organizations that employ lieterogeneous network 
enviranmenis in which any t'ombinaiion of Windows, Linux, or 
OS X servers can support any client/end-u.ser systems running 
on any of the three platforms. 

Other useful CRYPlO-.Server features include RSA migration 
functionality that enables RSA SecurlD DES tokens to be 
imported into the CRYITOServcT, and CRYPTO-Kil, a software 
developer's kit that provides developers with the tools required 
to integrate CRYPTOCard’s technology with existing security 
applieations/systems. 

We found CRYFIO-Server for OS X to be very well 
thought ouL Documentation is simple to follow, and the 
product does a good job of supporting authenlication 
requirements, including a full compliment of token form 


factors which should make it simple for any sized 
organization to customize an authentication solution to meet 
security requirements. The technology makes system 
configuration simple for administnirors, while the familiar 
ATM-siyle logon process is easy for users to grasp. 

CRYPTOCard was the first authenlication vendor to 
provide real two-factor authentication for the Mac, and we 
found thai the latest version of its technology gives the 
company a good basis to claim leadership in the OS X 
a uthentication ma rketplace. 



CRYTTO-Server for OS X is available in a "Five-User Kit/ 
whicli includes full server software, five tokens of the user's 
choice, and 30 days support, for $499. This compares 
favorably with other similar products from other large, well- 
esialilished vendors. The innovative all-you-need-in-one- 
box format also makes it simple for an organization to build 
their security solution as rerjuired. CRYPTOCard offers a free 
trial download of the CRYPTQ-Server technology on its 
website at www.cryptocafd.CQm , 



CRYFroCard Corp. 

340 March road 
Suite 600 

Kanata, Ontario. K2K 2E4 
Canada 



Phone; : North America 800-307-7042, 
International +1-613-599-2441 
Fax; +1-6] 3-599-2442 
Web: www.crvDtocard.com 
E-mail: info@cryptocard.com 
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Not CurSED, BlesSED! 

But sometimes, the keys to sed can be disguised. 

T his month, we’re going to follow up on sed, the powerhouse 
non-interactive editor, introduced in part 1 in December’s issue. 

Hopefully the holidays of that month didn’t take you away from _ 

really digging in and putting the lessons into practice. If you did take 
it all in, you’ve probably found several uses for it already. Tliis 
month, we’ll visit more sed mnemonics and add a few new tricks. 
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Bob's Yer Unde 

A few reminders ^iboiit sed regiirding rediredion 
tind piping. In pan 1, we worked on a single file, 
viewing the results on sereen. 'I'here are some things 1 
need to clear up before continuing. 

Naturally, you am redirect ihe oiiipul rnoni sed to a 
file. What I didn't iiientson last month is a tendency iliat 
many first-tinie sed users need to stay away from. Namely, 
ledirecting to the same hie that you're woricing on. Sure, 
you’ve tested your scrifit and you’re 1(X)% confident that it’s 
going to Tlie Right Thing, So, you do this: 


K-: 



2b 


eed -f my script. fled lnnE_text_file.txt > 

1on&_text_file * txt 

Seems perfectly natursl, right? WeUl, sorry, you 
can't do that. !fou can'r redirect to the same file 
you're altering. This is not an issue with sed, but 
just the way the shell works. The shell will 
truncate the destination file bejbre it executes your 
command. So, while it seems like it ml^ht work, it 
doesn't* You need to write to a temporary file 
first, and then overwrite the original If you desire 
to do so. The desired effect is achieved like this: 

$ sed -f myscrlpt .sed long^text_fil.e. txt ) 
tmp_file.txt 

S mv -f tmp_file*tKt loii£_text_file, txt 

Also, it may not have been clear from the 
introductory ankle rhat sed is happy to work 'on-the-fly’ 
by accepting and pumping out data via a pipe. To get a 
count of directories in a certain folder, for example, you 
could do this: 

Is -IRF /Users/raarczak/Documents I grep I sed 

s/:/'\/'/ I sed s/\ /'W 7g I wc -1 
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Pipe-to-pij>e-to-pi|ie-to-pi]ie! However, a sed master will never 
use two sed statements where one would do. This can also be 
written as: 

Is -IRF /Users/marezak/Document3 I grep "'^/” | sed -e 
s/:/'\/7 -e 6/\ f*\\ 7g I VC 1 

In short, pipe away, redirect carefully, and Bob’s yer uncle! 

Do it Better 

While the infomiatioa in part I of this article is more thnn 
enough for very pt>w^erful manipukuions, you still may run into 
some limitations. Thafs wjiy pad. 1 was die mtwduction: 
there’s still more! 

First, I mentioned that 1 would give the solution the 
’swapping Bill and Michael’ problem. The answer, of course, 
is, "'it depends,” You really have to lie familiar with your 
source material. For now, HI show the easy, yet most bmte- 
force way of haiKliing our scenario. Remember, the source 
text is this: 


Bill and Michael went to the .store. Bill needed to buy 
.some butter, eggs and flour. He and Michael were in a 
hurry to bake a cake for dieir parent’s Anniversary. Once 
they got home, Bill and Michael realized that they fojgoi 
cake icing. 


just like writing any code, you am swap using a temporary 
variable (sorry — setl doesn’t c^uiie have anything tike a bitwise 
swap!). .So, here you go: 
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sed -e *s/Bill/David/R' *e *s/Kichaei/Bill/g’ -e 
"s/David/Kichael/g* ehort_story.txt 

In our else, we probably really only want the fully cjualified “Bill 
and Michaer, so we can actualiy do just that: 

sed Vfi/Bill and Michael/Michacl and Stll/g* ahort_stnry-txt 

However, you may realize, titat this dt)c,s noi take into account 
line endings. Wliai if our phrase crosses a newline Ixuindaiy? 
Ml That’s where muftNine commands come in. 

Multi-line commands give .sed the ability lo lcK>k at more 
than one line in the f^aitcrn space. 'Yhls gives the sed script- 
crafter the ability to inject a little logic into the flow. Since our 
Story does not split “Hill and Michaer* anywhere, lei's kx)k at 
something llmi does: “Imy stjme..,”. If we wanted to change all 
occurrences of ‘^buy some" to ‘"purchase some", even if it spaas 
lines, we need to coax sed into doing so, Ag^ain, ilie brute-force 
way is simply this: 

/bijy/ [ 

K 

s/buy ‘\n“some/purchase Bome/ 

J 

lleiet we look for the address “buy” and when found, run 
a tmilti-line next (“N’') command. This command reads the 
next line of input and appends it lo the current pattern space 


- still ‘separated* by a new line, kike 1 said, bmie-force, and 
doesn’t really scale well Also, this has the potential of 
outputting some really long lines. Of course* elegance is just 
around the corner. A script that gives us use in more general 
cases could look like this: 

/buy/ I 
N 

fi/ ’W / 

s/hijy florae '/purchase railk*\ 

I 

First* we look for the address “buy’\ and if we fmd it* we pull 
rlie next line into the pattern space with “N". 'Hien, we can ditch 
the new line character and replace it with a sp;tce. From there 
we can try to march our patterns. However, even diis is a little 
prol)iematic - Just a drop. The example just given works just 
fine, but let*s alter our story and st'ripr. Adding a line to the story 
to tnake it this: 


Bill and Michael went to the store* Bill needed to buy 
some butter, eggs and flour. He and Michael were in a 
hurry tc^ bake a cake for their parent's Anniversary. Once 
lljey gut home* Bill and Michael realized that they forgot 
cake icing. It is important that they had not forgotten 
anything for the special day. 
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And changing tlie script to tliis: 

/got/ ( 

M 

s/ ^\ti/ / 

^/got home '/returned to their abode\ 

/ 

I 

...will lead to problems. The goal of tliis script is to change 
all occurrences of “got home'’ into “returned to their abode". 
Run it and see what happens. See the problem? “gof* 
matches “forgotten" on the last line^ hut makes no 
substitutions, so the saipt quits without outputting that line. 
It’s just MIA! Wlint to do? Exempt the last line of the script. 
Change tlie “N" to “$IN^ - sed recognises as the last line 
(not EOL like regexp). 

Tite reality is that you 11 find many, many, many 
examples like this. Depending on your so\irce(s), you 
may only he able to make a script just so gencniL This 
goes back to the rule: test, test, test! You canT test your 
script enough. 

Loose Fit 

In addition to the main pattern space iluii sed matches 
and manipulates, there is also a bold bu^er. Tlie 
commands are pretty self explanatory: ’x’ will exchange 
the pattern .space with the hold buffer, 'h' will copy the 
current pattern space into the hold buffcT, overwriting 
what was being held previously. *IY will do the same, hut 
append to the current lu>ld buffer, 'g’ gets the contents of 
the hold buffer and replaces ihe paiicrn space. XV gels the 


camtents of the hold buffer and appends its contents to the 
current pattern .space. 

Befoie 1 get into tliese commands, please remember tliat 
sed cenainly is a descendenr of the phrase I’EVll OViTlDl - "Iliere 
ts more than one way to do it. Many times, there will be 
multiple solutions to the panicular problem you're trying to 
overcome. Build up one piece at a time, test, and for goodness 
sake, dmument your .soluiion! (Did 1 mention that sed strripts 
recognize as a cominc'nL^) 

So, let's say we want to print the line before and the line 
after our match, so we can see it in contexi - like grep's ‘A', 
'O', and 'C' flags. Here's one way to approach this: 

aed -n ' 

*/Annlverfsary/' ][ 

line^ that do not match what we* re looking for 
save 

X 

# clear the current pattern buffer with delete 
d 

1 

*/Anniversary/' [ 

llne^ that mateSh 

# get the previous line from the hold buffer 

X 

# print it with p 

S get the current line back from the hold buffer 

X 

# print that 

get the nexL line 
n 

# print it 

I finally, drop this line Into the hold buffer 

X 

1* ahort_story.tKt 


BMS 


THE LAW OFFICE OF 
BRADLEY M. SNIDERMAN 




If you're developing software, you need your valuable work protected with 
trademark and copyright registration, as well as 
Non Disclosure Agreements. 

Then, when you are ready to sell it, you can protect yourself further 

with a licensing agreement. 

I am an attorney practicing in Inteliectual Property, Business Formations, 
Corporate, Commercial and Contract iaw. 

Piease give me a call or an e-mail. Reasonable fees. 


23679 Calabasas Rd. # 5 58 ' Calabasas, CA 913 (I 2 

PHONE 818-706-0631 FAX 818-706-0651 EMAIL brad@sniderman.com 



















Going back to our short story, this will look for a line 
containing 'Anniversary', print the line before it, the line 
iUseir, and the line following. Note the use of the “-n** 
switch passed into sed. 'I'his switch tells sed to not print 
all output by default. Oilierwise, you'll still see all of 
your input as it fillers through sed. Of course, to make 
all of this more useful, you could drop this right into a 
shell script, and use $1 for the pattern - this would give 
you a generic script that will always perform the 
equivalent of '‘grep -C 1 pattern file.txr’'. Just rememlxT: 
the way I iiroke this up over several lines is very hash 
specific, csh users must use the backslash to tell the 
interpreter that the line continues on. 

Step On 

Earlier, 1 alluded to .sed as a programming language by 
mentioning the classii^ lemp-vanable swap. Well, sed tends 
to lx: more full featured than most people re^ilize. You can 
even implement flow-control! sed features two c‘ommimds 
that let yrni cnmrt>l the logic of your script. *b* hnmehes to 
a lal)eL (Remind.s me of my favorite Mtitonib Assembly 
mnemonic - BIIA - BRanch Alw^ays). One exajnple, and 
youII get it. This script is an alternate to the script just 
presented that emulates 'grep -C V: 

# find tmr paiLnrn? jlimp I 
/Anniversary/ b prlntit 

# eiee hold it 
h 

f jump to end of script 
b 

:printit 

# previous tine from hold buf 

X 

# print It 

? get current line back 

X 

it print it 
S get next line 

# prliiL that 

P 

Kirst to note is the iahel. A label starts a line with a colon, 
and should contain seven characters or less. While most 
modern implementations allow a label to l>e any length - 
and is actually the IH')SIX spec: - there are still some 
versions of sed that restrict a label to 7 characters max. 
With "b\ we just branch - make the jump. Another flow- 
control command is T\ or, test. Test allows us to branch 
conditionally. The jump only happens if the previous 
substinjtion was successful. Another example is in order. 
Imagine a file that lists a userclass by numlser, and it 
should he by name. Additionally, you must process the 
file differently for each userclass. Here’s a mock script 
that coiikl handle this: 

/userclass/I 
s/2000/executive/ 
t exepath 
s/I500/management/ 


AA/CIMH 


JobCapture 

Automatic Time and Expense 
Tracking Software 


JobCapture is intuitive, user-friendly client-server 
software that intelligently and automatically 
tracks working time and activity. Open a docu¬ 
ment in any application, and it is automatically 
being timed by JobCapture. This guarantees that 
all work activity is recorded. 


JobCapture will increase productivity and your 
bottom line by providing accurate records for 
billing and analysis. Stop losing money now — 
Call today for more information; 973.763.9494 
Reps are available 10:00am-5:30pm, EST. 


w w w.captu reworks, com 


CaptuneWorlu' 


• Perfect for ad agencies, 
design studios, architects, 
law firms, PR Firms etc. 

• Scalable. Flexible. 

• Easy to configure. 

• Cost effective. Adding 
additional users is easy 
and inexpensive. 

• Tracks time and expenses. 


• Client and Server 
software is included. 

• Easily customized. 

• Real-time data delivery. 

• Customizable reporting. 

• View data numerically 
or graphically. 

• Import/Export data to 
SQL, mySQL, XML etc. 





L manpatlt 
^/lOOO/staff/ 
t stpath 

default action 

b 

:Gxcpath 
b 

:manpath 
b 

:stpath 

end of sctlpt 

'I’hose examples should get you going with flow 
CTontrol in sed. Remember, you can certainly jump to 
a laliel ahead of your Lest and even gel into (basic) 
reciirsionl 

Harmony 

lliere are a hunch of miscellaneous things that I’d 
like to point out before' we wrap up our conversation 
about sed. Some of these fall into tlie ''you liave to 
know the rules before you c-an break them" category, so 
I waited to present lliem. 

All of the examples Tve given, and most that youH 
see, use a forward slash (V) as the delimiter 
Amazingly, sed lets you use whatever you like, 'file 
delimiter is great if ytiu have a very simple 
replacement, such as sed s/one/two/g. However, 
if youVe replacing file paths, that could get messy. So, 
u.se an underscore, if you like: sed 


HpstedStore / 



HostedStore provides a TURNKEY 
SOLUTION FOR CREATING A WEB STORE, 

yet is extensibie so deveiopers can use 
the appiicatfon as a base for creating 
customized solutions for their clients. 



The extensibility of HostedStore provides a 
structure which allows developers to 
create modules that add new functionality 
or alter the buitt-in features. 




We are seeking software resellers, hosting 
providers, developers, and designers that 
currently offer or plan to offer ecommerce 
solutions to their clients. Resellers receive 
a discount off of the published list price of 
our software and are free to bundle our 
software with their own products and/or 
services. 


[ 


www.hostedstore.com 


] 





‘s_/usr/sbin_/usr/bln_\ Easier to read, right? 

The (eciuai sign) mnemonic prints out the current 
line numlier. So, you can simply line numix:r any text file: 

£i^d textfile.txt 

Or, you can use to just find the lines lliai. the pattern 
you're looking for lie in: 

sed -n ‘/Bill/ story*txt 

YouVe probably picked these two up by now, but 
1 should make them clear. Quoting: you really only 
need to quote if you have metacharacters, bul it’s a 
good habit to get into. This; sed s/Bill/Mike/g 
is the same as this: sed 's/Bill/ Hike/gV. 
However, try this: sed s / , * add r as s * \ 

Castring\) \ (A1) $1) / and sed is just going to 
cough up eleciron.s, ‘fhe second thing is the use of the 
''-e" switcli. If you only have one command, you can 
forgo the “-e". If you have multiple cominands, you 
need to add each of them to the list of editing 
commands with the “-e” switch. 

Lastly, a note about newlines, or, EOL. Somewhat 
confusingly, you match a newline with the standard 
regexp An*. However, to output a newline, you use a 
literal newline: 

lied ‘fj/Bill/Btin 

/g■ GCory.txt 

'Hits will drop a newline after every occurrence of 'Bilk in 
our sample text. 

Cut ‘Em Loose Bruce 

...and i thought I was gt)ing to get to awk this 
month! llopefully, this gives you some ideas about .sed 
and its power. 1 also hope with practice, that you use 
this power. You really have to .see .set] as an editor. It 
just happens to be one that you don't use interaetively 
like vi, emacs or pico. Go forth and edit non- 
interaciively! .sed i.s an indispensable tool for any 
system administrator's toolehcsl, and there are plenty 
of repetitive tasks wailing for you to automate. 


Yill 


About The Author 



Ed Maraak awns and operates Radiotope, a 
tethnology consulting company. Despite being 
around the technology block once or twice, 
he's thankful that there's always something 
new to look forward to. Something new at 
http://www.radietope.com 
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\mm COMPUTING 

System-X; 


Emmanuel Stein 


High Performance Computing 
(HPC); An introduction 


An inside look at the inner- 
workings of the original OS X- 
based supercomputer, plans for 
the final upgrade and the science 
that drives System-X, as well as, 
future directions in the world of 
High Performance Computing. 


Many of totlay's UPC Clusters, such as Virginia Tech's 
System-X, lake advantage of open source software and build iheir 
infrastructure art>und eoniniodily li aid ware solutions in what aie 
typically referred to as “oneoff systems. This type of approach 
differs dramatically from many of the ni(jrc“ turn-key software 
driven cluster solutions, epiioinized by Apple's Workgroup 
cluster, in which software solutians such as Onicle RAC, 
gridMathcmaLica and Rendemtan, just to name a few, drive the 
liardware solution ap[MO[)riate for a given application. In tlie case 
of these systems, enhanced user experience and facilitated 
deployment and management represent the driving forces. 
However, sueli solutitjns coin[)roinise efficiency for ease of tise 
and therefore lend to take the performance out of HPt;;. Aiiiong 
Kxlay's real HPC solutions, a premium is placed on getting the 
most out of a given liardware arehiteeture. In the case of Systeni- 
X, as well a.s, .similar clusters that have ft.>llowc^l (e.g. Turing and 
COLS A MIX^ c’liisSters), the Fowerl^C 970 prcx;essor, with its two 
double precision floating uniLs and the availability of low-latency 
fabric .such as Myrinet and InfiniBand, served as the prime 
movers behind the choice of platform. The majority of today's 
top HPC supercomputers take advantage of iliese low-latency 
solutions to realize their blindingly fast pamllel compumtions, 
Hiis, in turn, enables a cluster to take full benefit of the 
processing power of each individual node.There are a numfier of 
great vendors providing low-latency technology including .Small 
'free Solutions and Mellanox. 


To take advantage of an HPC environment. Message Passing 
Interface (MPI) is employed to realize paralleliziition acrass a 
laigeted ,set of dusrer ncxies. MPI is a low-level, but standuKlized 
meth<xl of pnigrammalically enabling communication among 
disiramle ikkIus. Implemented as libraries in C and subroutines in 
POR'l’RAN, MPI was developed as a poitible, lowdevel interface for 
enaliling panrilelism within a multi-prcxessor or multi-notle 
envuxininent. Although, otiier mechanisms for l.ueaking down 
computational problems across multiple prexessors or nodes may 
Ix^ ax'compiishecl using approaches sinh as OpenMP, Mf^I rcTuains 
the interlace of clioice for Hl^C aiiplications due to its Ilexibility, raw 
[x^ifonmince and .scalability. For example, Verari Systems Software 
makes the commercial MPl/T^io 2,1 software, consideied to lx: a 
high-()erformance, ,sc’alat>le im[ilejnentalion of the MPr-2 standaid; 
and Hanger Research makes Ptxx'h, a gmphic'al MPI solution. 

System-X: The Race to Build 
Academia’s Fastest Supercomputer 

At 1pm, on June 23, 2{X)3t Jason Lockhart watched on as Afjple 
aniiouneed tlie new PowerMiic G% In dial inshmt tlie fRistration of 
montlis of dead end talks witli potential vendors, for the acciuisition 
of an HIT, dusicr capable of 10 terallops, vani.shed xs die future 
platfunn of die tlien unnamed System-X mateiiaiized as if out of thin 
air. A week later Dr. Srinidhi Varadamjan, who liad submitted a 
proposal to the National Scienc‘e Foundation (NSF) lor a Major 
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Research liLstmiTTeiiration grant, was fiow^n to Apple headquarrers to 
discuss the reasihility of constnicling a l,l(X) node HPC 
supercomputer using Apple's yet lo ix; released line ol PowerR' 970- 
kised systems. Varackimjan not ojily convinced Apple tluit Viiginia 
Tech should he given tlie t>p[Tortunity to build tlie high profile HPC 
diLster l>ur ak) rnanagtxl to seaiR? the first 1,100 pixxluction units. 
Altiiough, not a Mac user at die time, Vuradarajiin tcx)k only 3 day.s 
lo rc^alize tlim OS X and the PowerMac G3 fepnesenled the ideal 
platform for hiitlding his ambitious siipercomputing pn>jecL 

Grace Under Pressure; 

rollowhng the choice of the GS plaiform came ihe 
monumental task of adapting and extending core software 
components such as MPl, BLAS, InfiniBand drivers, and tlie 
custom high performance memory manager to run optimally on 
the 2,200 CPU chLsler In a whirlwind of prodigious 
programming, Varadara|an, 2 Mellanox engineers and a liandful 
of graduate .students accomplished what would have taken an 
army of dedicated tievelopers many months to complete. 

Among the mosi crucial tasks, was to adapt existing 
variants of MPI to run on such a large-scale cluster and, 
moreover, to do so in a manner ihai was both robust and ihai 
nK>k full advantage of the low latency InfiniBand fabric. 
Although, MPI variants had been ported to QS X previously, 
none offered the ability lo scale much past a 128-node duster, 
miu'h les.s a 2,200 CPU sysletm There was also ihe challenge to 
adaf>t the existing MPI stack to make efficient use of the 
InfiniBand fabric. In fact, the only available MPI 
implementation ihai did support InfiniBand was only available 
in beta form and had not been designed, much less optimized 
for eiihei‘ OS X or a duster on the scale of System-X. 

In collalxiration with Dr Panda, of Ohio Slate University, 
the author of the MVAPlQi (MPI for Verbs API with InfiniBand 
su[>[>ort), Vaiadarajan worked tirelessly to soit through the 
MVAPICII code base, t>ptiniizing or rewriting substantial [Jonions 
of the code. In itiis endeavor, virtually no element of the code 
was left untouched, since the ultimate j^rformance and ranking 
of System-X w'ould depend on the .successful im piemen la lion of 
liiis critical [)icce of the puzzle. 

At the same time, two Mellanox engineers aided by then 
graduate student Michael Heffner, w'orked around the dock for 
several weeks to develop tlie raw InfiniBand drivers for use with 
System-X. Tltese raw drivers were integrated with the newly 
ported MPI slack u.sing a kernel fiypass to comniunuate directly 
with the InfiniBand Host Cliannel Adapter (HCA). 

During this [>eriod of frantic development, Varadarajan, with 
extensive help frt>m Dr. Goto, of the Texas Ativanced Comfxuing 
Center, worked lo furlhcT tune and optimize Gotos’ BIAS (Basic 
Linear Algebra Sub-routines) for use w'ith his memory 
management system. GotoBl.AS is ihe fasiesl available BIAS 
implementation and proved instrumental tn obtaining increased 
[)crfoniiance of matrix opcTations—crucial for high scores on the 
UNPACK benchmark (http://wwvv.netlib.org/benchmark/hplD used 
by the TopSOO organization to rank supercomputers. 

What resulted from these intense efforts was what principal 
de.signer Varadarajan termed a “^pleasani surprise,” with an 
amazing top 3 showing in llie supereornf>uting challenge. Tills 


accomplishment is underscored by the fact rhat System-X cost 
only $5.2 Million and was [)lu together in roughly 3 weeks! To 
|)ui this in peispective, the top supercomputer that year, the 
custom designed Japanese Earth Simulator (5,104 prcxressors), 
whicrh OLitperlorrned System-X !>y a factor of three, cost $350 
Million and was several years in the making. 



Figure 1. System-X in 2005 after earning top 5 status on 
the Supercomputing TopSOO with 10.28 TF 


System-X Version 2-0 

In 2004 System-X was upgraded from 1,100 PowerMac 
G5 Lowers lo Xserve G5s running dual 2.3 GHz processors, 
uj) from the previous towers running dual 2 GHz G5s. The 
improved througlipui enabled by the Xserve I/O .subsystem, 
coupled with tile increased dock S[)eed of the processors, 
afforded the system a significant speedup, from 10.28 to 
12.25 teraflops (peak performance 17.5 feraflops). With the 
addition of ECC memory I lie system nioved from, what was, 
in essence, a benchmarking and proof-of-concept system, to 
a formidable production MFC supercomputer capable of 
precLse and massively parallel scientific computations. The 
addition of ECC RAM proved essential to the success of 
subsequent research since, over IlOO nodes, a single bit flip, 
caused by a solar flare, could significantly corrupt the 
precision of the calculated data. 



Figure 2. System-X: lit Pradudion and cruising along at 1225 TF 
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The Makings of an HPC Speed 

Compute Nodes; 

1,100 Dual 2*3Ghz Xserve Cluster Nodes configured with 4 CtB of ECC 
DDR400 RAM, 80GB hard drives, Gigabit Eihcmel and Mellanox Cougar 4x 
InfiniBand Most Channel Adaptei-s (MCA). 

Compile Nodes: 

3 Dual 2.3Ghz Xserve nodes with 4GB of ECC DDR4(X) RAM, 3 250GB hard 
drives and Gigabit Ethernet. 




Figure 3. pbstop command 


Networking: 

For primary low latency febric, 4 SilvetStorm I’eclinologies 9120 InflnlBjind core 
switches, supporting 4x InfiniBand (10Gl>s bidireciional port spetxl) with 11 leaf 
mcxlules and 3 spine modules, as well as, 64 SilvcrStomi Technologies 9024 
InfiniBand leaf switdies using 4x InfiniBand (10Gl>s bidirectional pon speed) 
witli 24 InfiniBand pons per leaf switch. Secondary cx)mmiinicaiion,s pnwicled 
by 6 Cisco Systems 240^porT 4506 Etiiemet switches. 

Storage: 

Xserve RAID^ configured as a RAID 50 array, storing 2.7TB of data and 
available as an NFS server with aggregate write bandwidth of 90-100MB/sec, 
System-X users employ this as a temporary storage area with results sets 
offloaded to more permanent .storage areas as needed. 

Cooling: 

Custom Liebert Extreme Density cooling system, in a chilled water loop 
configuration and fed off of two 125 ton Carrier water chillers that supply 
about 3 million Bl'Us of cooling capacity. Lieben XDP systems with a R- 
134A refrigerant loop supplied to rack mounted liquid-tQ-air heat 
exchangers. 

Software: 

Apple OS X 103.9 (currently migrating to 10.4.x), MVAPICH for nie.ssage 
passing. Torque (OpenPBS) for queue management, Moab (Maui) for job 
scheduling. Ganglia for system mf>nitoring, as well as, IBM XI. Fortran, IBM 
XLC and GCC 3.3 compilers. For example, Verari Systems Software makes the 
commercial MFI/Pro 2T software, considered to be a high-performance, 
scalable implementation of the MPl-2 standard; and Danger Research makes 
PcKxh, a graphical MPl solution. 


Witli tlie qstat coriaiumd, uscn> cm see llie aclivity 
and queue staais of various jol:*s submitted to or currently 
running on Sysiem-X. Altliough, some users have 
parallelizcxJ dieir cxxle to run on ^ill available nodes, llic 
more conimon usage scenario involves having multiple 
u.sers running johs a>ix'um*nily on snruiller sulx^ets of 
compute nodes. Tltis occurs for .sevcml ncasons: it takes a 
lot of expertise and time to parallelize your code to take 
full advantage of all available ntxles, lime spent in queue 
is pn)porLional to the numlxfr of ntKles requested for a 
given job, ^md some coniptiUttions lend tlieniselves letter 
to parallelization acmas fewer nodes. 



Below is a generic joli sulimission sc'rii^ for System- 
X. Interestmgly enough, il is also employed as a simple 
Ix^ndimarking nmtinc to test sy.sicfn jx:rformance and 
troubleslxxit passible issues acrass system ncxles. 


System-X: Terminal Velocity 

Although Sysrem-X nms a relatively unmodified version of 
OS X, the GUI t.s absent from compute ntxles and job sulimi.ssion 
is done via the simple yet powerful tenninal interface. What 
follows is a cockpit view of System-X. 

The pbstop command serves as a mtjnitor of node ariivity 
across the cluster. 
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stay In Control Wherever You Go. 



THERE 


HERE 


Netopia’s products have been the leading remote 
control and web-based remote access solutions for the 
distributed enterprise. 


On Mac OS 


? .-'ll: 

Choose how you want to manage your computer 
network and communicate with those working on 
Of off-site, quickly, easily and securely. 


% 


or Windows 


Timbuktu* Pro 

Whether you're at home or at work, using a Mac OS or Windows platform, Timbuktu 
Pro allows you to operate distant computers as if you were sitting in front of them. 
Transfer files and folders quickly and easily, and communicate by instant message, 
text chat, or voice intercom. 


eCare 

eCare’s web-based remote access capabilities enable any user to securely place their 
virtual eyes and fingers directly on the remote client’s desktop for collaboration, 
problem resolution, and improved customer satisfaction. Using only a web browser, 
eCare’s secure and fast screen sharing, file transfer, live chat, URL push and live 
session recording make it the ideal solution for the conference room, classroom, or 
help desk - live, on demand. 

Download an evaluation or buy it online: www.netopia.com 
Call us at 1-800-485-5741 


^ 2D05, Nctopis, tnc. All rights rGScrvod, NotOFMa. tha Notopia designp and riinbuklu are ragisierad trademarks betongiiig m 
Netopia, (nc,, registered in the U.S. Patent and Trademark Office. Ail other trademarks are the property of their respechvo owoors. 
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She Blinded Me With Science 

System-X airrendy plays host to numert)iis rc'scairficrs 
around the world, thereby seitinf? tiie stage for increasingly 
gn)undl>reaking reseaR‘li. In dtis section we will cover some of the 
most popular applications available on System-X and feature some 
of the stunning scientific dcvelof>ments Ix^ing made with the 
advantage of 12.25+ teriflops of raw number cainching power. 

A Community of Codes 

System-X was designed to offer a generalized, rather than 
application S[>ecific (e.g. IBM's Blue Gene Machines) piaiform 
for scientific research. To (‘apitalize on the ijerfoniiancc 
capabilities of the machines, prospective researchers must 
lx.’coiiie master panillel programmers in addition to competent 
scientists wuthin their respective disciplines. This rather 
{laiiniing re<fuiremenl is somewhai offset by the widespread 
availability of discipline-specific community code that Is used as 
a starting point for the computational decomposition of scientific 
questions. Although, standards like MVl have iiutde code 
portability among these systems more of a reality, each 
individual liFC cluster represents a unk|ue computing 
environment and thus no two HPC cliislers are identical. As a 
result, consider^ible effort is required in optimizing ccxle for 
[parallel runs specific to a given 1IPC environment. 

What follows represents some of the community derived 
software tools ih;ii are available as pan of the System-X: 

• AMBER (Assisted Model Building with Energy Rellnemt?nt): A 

moleaibir dynamic simulation package Irased on a molcx'ulur 
dynamics force field ecjuation develo[K*d by Peter Kollimin 
at die Unjvc*rsity of Galifomui. 7he simukition cjf pmtein folding 
IS among the variety of applicitions for wtiich AMBER is iLsed. 

• ARPREC (C++/Foitnm~9(l AHiilrary Precision Package): Esseniiiilly 

a C++ Libniry with l>oth C++ and Foitmn-90 imnslatkm mcxJulc's, 
ARi^REC Ls a mathematical Uxilkit tliat cmibles Researchers to 
conduct interactive and higlvprecLsion aridmietic computatioas 
up to the level of 10-million digits. Tliis cnm[>uiatioiial 
cnvitonmeni sup]X)rts higli-pR'cisit>n teii), integer and complex 
datatyjxs and may Ix^ applied to all Ixisic arithmetic opettition.s, 
most tmnsc'endental and comhinatorial hmetions, as well as, 
high-pRx ision tjuadraUire and summation of series. 

• ARPS (Advanced Regional Prediction System): Tliis advanced 

weailier mtKleling KksI, devekiped at llie Center for Analysis 
and Prediction of Storms (CAPS), is an atmosplieric mcxleling 
and prediction system, which affords rese^urhers real-time 
data analysis and assimilation. 

• CllARMM (Chemistry at HARvard Macromolecular Mechanic's): 

In the same vein as AMHF.R, CHARMM is U>lh a force field 
and a simulation package dial allows scientists to apply the 
force field algorithms to problems in molecular dynamics. 

• FASTEST {Flow Analysis Solving Traaspoil Equations with 
Simulated Turbulence): Applied in the study of fluid dynamics, 


PASl’ES'l' is iLsed to solve three-dimensional flow prol^lems. Tlie 
,set of itsstKiated ccjuatkms inckide several turliulence models, 
wliich feature free topology, implicit lime stepping, and tliat are 
pnillelized and multi-grid enabled, 

• GAMESS (General Atomic and Molecular Electronic Structure 

System): Used by researchers in quantum chemistry, 
GAMF^SS is specifically designed software package for 
jXTfarming computational chemistry calculations of the 
liartree-FcK'k, density ftmctional theory and configuration 
interaction types, among others, within the domain of 
advanced electronic structure methods. 

• Global Arrays: A shart!d memory programming interlace for u.se 

in distributed memory environments such as computational 
clusters* this trx>Ikit repre^ms a departure from other sharcxl 
memory interfac'es incismiich as it is fully compatible witli 
Me.ssage Passing Interface (MPI) and, furthermore, allows 
pnrgrammers to combine tnessage passing and shared 
memory schemes within the context of a single application. 
Global Arrays aLst) goes iK^ond MPI compatibility by allowing 
users to exploit existing message-passing libraries for 
facilitated development of highly parallelized code. 

• lAMMPS (l^rgc-SQile Attunic/Molccular Massively Parallel 
Simtilator): 'lliis molecular clyn;imics simulator Ls de,signed for 
use in Ixifh pLirallel and sijigle pnK\:ssor taivirmmcnls and may 
Ix! usetl io build molecular systems. aLilomaiiadly assign foice 
fick) ccxrfficicnLs utkI fxrrfomi comf^lcx molcailar dynamics 
sintLilaiions imalyses ;md visualiz:ttiorLs. LAMMPS may lx: af)plied 
tf> atomic, polymetric, biologiciil, metallic, granular, and hyl>rid 
systems. Written in jxjrtal)lc C++, lAMMl^ is higlily exteasil:>le 
and Ls capable of dlstrilxited memoty^ mess;i^ pressing for 
optintid peifonnance in HPC environments. 

• METIS (Family of Multi-Level Pa nit inning Algorithms) and 
parMEIlS (Parallel MEFIS): METIS and iLs parallelized, MPI 
aware variant parMETIS represent a series of applications for 
[> 4 irtitioning unstructured graphs/hypcTgnipii,s and are used in 
the ajinputation of fill-axluc'ing orderings of spare matrices. 
This family of programs is applied in the fields of numerical 
computation, VSLI, geograpliicai information .systems, 
operation research, hioin forma lies and knowiedge disct>very, 

• NWChem: An llPC^-enahled compiualional chemistry package 

used in the study of molecular mechanics and molecular 
dynamics using Hartrec-ptH.k, Ikist-Hartrce-FcKk, and density^ 
functional theory methods, the NWChem software was 
cleveloped at the Pacific Northwest National Laboratory by 
the Mcdeailar St:ienc:es Software group within the context of 
the Theory, Modeling 8l Simulation program and under the 
purview^ of the Environmental Molecular Sc:iences I^bcjratory, 

• PETSc (Ponable, Extensible Toolkit for Scientiric 
Computation): A suite of data sraicmres and routines used in 
the parallelized computation of both linear and nonlinear 
eciuations and avaibhle in C, C++, Foitran and Python. 
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• SraLAPACK (Sailuble linear Algebra PACKage): in the 

solution of dense linear systems and for the computation of 
eigenvalues lor dense matrices, these block-partition based 
algtiritlims serve to curtail the frequency of tiaua movement 
l>etween levels within memory hierarchies. Here, memory 
liierarchies am apt>ly to tile off-processor memory of other 
prcxressors, hierarcliies of registers, cache and kxal memory 
on individual processors. 

• Unified Parallel C; A set of C programming extensions used to 

provide a framework for prograntming in tlie context of 
shared, as well as, dislribuied tnemory environments 

• VASP (Vienna Ab-initio Simulation Pac*kagc: A Fojtraii-9() 
application package used in the field of al>initiu quantum* 
mechanical molecular dynamics and for the purposes of 
calculating forces and stresses involved in relaxing atoiTcs 
into their respective instantaneous groundstates. 

• VecLib: (BLAS, LAPACK, rrr, DS1^) An Apple designed 
framework for ahstnuiing intensive malhematical 
processing in a manner optimised for the aitivec engine 
and specific to the CiS prcjcessor. I'or more details see 
htt p://develQDeraDDle.cQm/technQte5/ln/tn2Q86,ht ml. 

• WF (Weather Reseaah and Foreca.sting M<Klel: 'lliis mesosaile 

numerical weatlier piediction system is iisetl for opcaalional 
forecasting and atrnospheric research anil is u.seful for climate 
modeling across meters to iliousatKis of kiloineiers. 

A Gallery of Computations 

To highlight some of the real*world science coming out of 
Systeni-X, the folk)wing Ls a sampling of research visualizations, 
witii accompanying quotes from the principal investig^itors. 
(QuickTime renders of the streeashoLs l)clow. ineluding additional 
material, are available ai http://oeopiexs,vt.edu/-ribbens/tcf/SCQ5/ . 
cnttitesy of Qil Ril:)lxms, Ph.D. 

“Dr. Onufriev's group Ls using Sysierii-X to yxaibnii a series of 
molecular dynamics simulaiioas aimc’d at gaining insight into (and 
ukitnalely projX)si[ig a medianlsm for) the unusual flexibility of 
short DNA fragments, 'lliis new phenomenon was recently 
dlsawered in experimenis that challenge the conventional pictiia^ 
of tile DNA molecule, Iniditionally thought to iK^have more or less 
like a rigid rod at the biologiailly importam length scales of up to 
teas of nanometers. The emerging pieiua^ of a much more flexible 
DNA may change our understanding of how DNA interacts with 
other liiomolecules, such as proteins. An ability to coaecliy 
desailie these interactions is of fundamental importance to 
molecular l.iiology and medicine. In agreement with experiments, 
cojuputer simulations reveal large-saile fluniiations of ifte DNA 
Ihigment, and most im|iortantiy provide full atomic derails of tlie 
staictiiral changes upon lx,‘nding. Early results indiaiie that no 
unraveling of tlie famous double-helical stmctiia" is required for 
substantial bending, helping to zoom in on the jxissible 
mechanism explaining ihis ncw^ly discovered [ihenomenon," - 
Alexey Onufriev 


“Phospholipid bilayers 
are cell membranes wliicli 
play an c,s,sential lole in 
protecting the cell and 
regulating biological 
activity lx:iweeii the 
extracellular and 

intrat'ellular dematn. Tlie 
biophysics of ceil 
membra ties is of great 
importance in 

u ndersr a n d i ng bit)] ogical 
phenomena, ranging from 
drug interaction to ameer 
treatment to bio- 
ptxt.servaii( m. G >nvcnUonal 
lalxiraloty exixfriments are 
not always capable of 
probing molecular 

interactioas and di.stinguishing amt>ng the many pixicesses 
cKcurring at the molecular level. Professor Sum and his research 
group (www.che.vt.edu/Sum) are applying and developing 
advanced molecular mcxleling methexLs to sturly phaspholipids 
bilayers to undersumd their simaure, dynamic, and interaaions 
with different solute niolecules. One pmjed iikkIcIs the interadions 
anti tiilTusion of ayoprotectants with the phospholipids hiiayer to 
obtain insight into preservation methantsjus of biologic'al systems. 
In another projeci. Sum and colleagues are piohing the activation 
mechanism of the sensory system in response to specific 
cum[X>unds. Even though these systems only enaimjxLSs a few 
nanometers of a incxlel cell membrane, tliey contain a laige number 
of molecules. System X has enabltxl Professor Sum to study these 
systejiLs in much greater detail fiy allowing exkmsive simulaUoas for 
larger systems (order of l(X),(KK) atoms) and for longer periods of 
lime (order of 10* 100 as). The simulations on System X allow for 
ilie de\'dopmeni of longTitiie tlynamic'.s, wliidi is critical to 
understanding the pliospholipicLs bilayers (long-relaxation times) 
and the diffusion prexess."* - Atmideu Sum 



Figure 7. Biophysics of Phospholipid Bilayers (Amadeu Sum) 
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Figure 6. Insights into the 
Mechanisms of DNA Flexibility 
(Alexey Onufriev) 
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System-X Version 3.0 


Vii^inki Tech Is in die prociass of tipgradin^J System-X to take 
advantage of teclinologkal advances in fiodi software and hardware 
and LlK:iel)y increase die [x:Ffonmnce of diis computational titan. 
Speciiic upgrades include a general system update from OS 103*9 to 
OS 10.4, which promisc.'s to offer l)enefiis in terms of Ixitler niemoiy 
managc-menl and, most signiffcandy, die ability to use 64-bit address 
space to dntmatically increase die restjlution of experimental results 
secs. Further enhancxmienis will int iude updated Infinifkmd drivers, 
as well as, die deployriieni t4‘ newer vcTsions of die Mellanox 
InfiniBand I ICAs used for inter-node communication. Beyond diese 
enhiinc’emenrs, each node will be upgraded from 4 to B Gigabytes of 
memory, dius doubling die availalile memory |xx>l for disiril)uted 
coiiifnitation. In additioiuil, iheie are plaas to update die MPI *^ick 
and deploy 64-Bit compilers to take advantage of die addres^sing 
spac:e in Tigec Once dic-se updates are applied, System-X will lx; 
aiasidered sUible and no further enhancements, lieyond minoi' 
software ii[xlate.s, are envi.saged. Hie gotil with tliis final revision of 
Sy.steni-X is to offer a robust pnduclion HPC pladbmi dial will 
seivice the scientific ccaiimunity foj' yean to come, widi longevity 
lieing ii priniaiy a.spiration. 



Figure 8. Systeni-X today running at full bore and 
ready for Tiger! 


side's fn>m dctxirtment-si^^ed machines to nationiJ'SC'ale resources.” 
One example of this \s the National Lambda ILiil (NiR), an Eihemei 
based optical network, whic:h serves Ltj connect research 
communities and associated computing resources acmss the 
counUy. Although not yet in wide.spiead use, the HUi promises to 
advance research in the area of next generation networking 
tcchmdogic^ and ils derivatives may well overtake rtxlay^s tiaditional 
Internet Ixicklxme. CJIECS will also serve as a test-bed lor both 
theoretical and pmaical application.s within the area of and will 
work to develof) succes,soni to System-X, as well as, collaborate with 
scientific communities across the world to create much needed 
.software environments for future HPC systems. 
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Beyond System-X 

Sy 5 tem-X is only the Iieginoing far Viiginin Tech, wliich lias 
opened the Center lor High-End (Computing Systems (CHECS). 
Under the dmcclion of Dr Vuruckirajan, the center’s mission Is to 
tackle the varitius challenges associated with de\^eloping the next 
generation of HHZ dusters, the staff aie airrently working to train 
future computational .scientists in the art of building HlK"-enabling 
and enliancing technologies. One of the primary goals is a 
convergence of liitherto di.s|iarate CS disciplines such as prex^essor 
and memory architectures, operating systems, nmiime 
environments, communications subsystems, fault-tolerance, 
scheduling and load-ha lancing, power aware systems and 
algorithms and associated progminming models. According to 
Varadarajan. the aim is Icj architect and implement “com[:iuLing 
systems and eiivironmeiiLs that ciin efficiently and usably span tlie 


Jane Talbot, Photo Librarian, Visual Communications, The Visual and Broadcast 
Communications Department 

"I'd also like to thank the many other administrators, contractors and volunteers 
that made this all possible. We may have been the glue that held it all together, but 
everyone who participated gave 110% to this project. Without their dedication and 
attention to detail the project would not have been possible" -^Jason Lockhart 
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PATCH PANEL • by John C, Welch 


Nagios on os X, Part 2 


Setting Up Nagios 2.( 

) 

^1^ ince part one of this article was published, there have been 
some changes in Nagios, (the reasons behind the delay for 
part two in fact.) Nagios 2 has reached the release candidate 
stage, and as such, 1 felt that this part should deal with what 
(should) be the cunent version by the time you read this. Luckily, 
this doesn’t really change anything in part 1 other than the version 
of Nagios you download and install, and one minor change for the 
configure step of installing Nagios. 




Addendum and Errata 

faa, you have your choice of rwo templates to work from, one 
called “mmimal.d^-samplc" and one called "biggercfg.sample”. 
As the names imply, iliey are for mmimal, and slightly bigger 
Nagios setups. 

In CISC I haven'! done this, let me stress one critiail point: 
This article is not, nor sbimld it he lakefi as a repiacemmt for 
the Nagios dmimmitatlon! 'Hiat dcKaiinentation is far more 
complete, and if this article disagrees with the Nagios docs, the 
Nagi{)s dcK's sliould Lx.* assumed to f>e more correct, unless they 
are assuming !Mac QJi X. 

The Config Files 

As 1 have alluded to, Nagifrs makes lisc of text conftg hies 
for its setup and to dt) its vvtirk. They can seem daunting at first, 
hui ihey do follow a logical flow and they should not intimidate 
you ill die least. When you initially install ihe config files, iliey 
all have the name panern of <somcihing>cfg-s;imple. When 
you have a file set up as you like, remove the -sample from the 
end of the name, and Nagios will 1^ able to use it. Note tliat in 
genenil, any changes ro a config file will prtibably require a 
restart of the Nagios process for liiose changes to l>e used, 

Basic Nagios config theory 

Before we get Into specifics of tlie files, we need to look at 
the relationship ijf tilings in Nagios, so that we might have a 


'Ihe change involves an additional group, ihe nagitis 
command group. 1 use nagiosemd for tlie name of this 
group, and you cTeiUe it as you did the nagios group in 
part L TTiis brings us to a rather obvious eiror in part one, 
and one 1 .should have raiight. Hie configure commtmd in 
part one i.s incorrect, and if it works at all, will give you an 
incorrect setup. With Nagios 2 in mind, ihe nirrecl 
configure command isi 

./configure with gd lib^/opt/local/lib ^ith gd- 
inc*/opt/1ocai/include -profix^/usr/Iocat/nag I os th' 

eglurl"*/egi-bin -with-htmlurl”/ 'with nagios user-nflgioft 
”Vi th - nagioB * group“tia gios -with-comand - graup^naglcjsetiid 

That should work conectly for you. The rest of parr 
one should be unchanged for you, it has been for me. 

Initial Configuration 

One change in Nagiexs 2, and one that will l^e 
welcomc-d by administrators new to Nagios is the initial 
configuration. In Nagias 1.2 and Later, yoti had to use 
multiple configuration files, and getting them set up, and 
gnesping the relalionsliip lx:tween tliem was a little tricky. 
With Nagios 2, if you’re new to Nagios, or you want to 
play with a smaller setup before you get into mapping the 
entire Internet, you can now use a much smaller nomlier 
of config files (around 3 for a minimal configuration). In 
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txHter mentiil picture of what\s going on. The bitsic ‘unit’ in 
Nagios is tliu liost. A host is a a>nipuier» a R)uter, switch, cic. 
It's anything that Nagios directly probes. Each host has a series 
of r haracteristic^, like fP address, and name that define it to 
Nagios. Sinc:e you can have hundreds, if nul tiiousancis of iiosis 
in a network, and applying settings and services to them 
individually would be rather tediouSj you have htwtgruups. 
Hostgroups are just wltaL they sound like, a ctilleetion of liosis 
that allow you to more eitsily work with hosts. So you can apply 
a prol:»e to a single hostgroup instead of 300 hosts. Easier, no? 

Nt)w, since in atldition to monitoring, we have to notify 
people we have contacts. Contacts are the huniiin versions of 
hosts. You can use email, paging, whatever method you can 
script Nagios to use to nr>tify contacts. As we ll see, you can also 
set up working hours and non-working I tours for notilicaiions 
too, so non-critical notifications aren’t paging people at 2am. 
Like hostgroups, we have contactgroups, since in larger 
organizations, you may liavc tfuite a few people who need to 
receive notifications from the same host or hoscgrou[x 

'I'he actual prol'>es Nagios uses are checkcomniands, and 
that's what determines the information that Naguxs eliccks. 
However, you don't directly apply die checkcoinmands, rather 
you use services, which use the checkcomniand definition, and 
other parameters to probe hostCgroups). This makes it easier to 
iiave many checks [kt IkisL 


Anoilier basic exmeep! is ilie dependency. This can lie 
used to make sure that you're not getting sj^urious alerts. For 
example, if you have a monitored switch that has 24 monitored 
hosts connectexi to it and tlie switch goes down, you’d 
|X)teniially get alerts froni all 25 Itosts and however many 
services aie being monitored on each host, if the switch is down, 
you can't talk to the hosts anyway, so ihose alerts are somewhal 
useless, as whal iliey’re really telling you is that die htxsis are 
unreachable, not that they're acUially malfunctioning. So, we use 
dependencies to say “If Switch A is down/unreachable, don't 
Ixither me with alert-s from its attached hosts/ You can have 
Ixith seivice and host dependencies, and both are critical to a 
happy Nagios installation. 

Finally we have extended info, for both hosLs and services 
wlEch can be diouglit of as metadata. This is useful for tilings like 
3-L) icons, connecting Nagios to various graphing utilities, etc. 

nagios.cfg 

llie nagios.ctg file is the heart of Nagios. Without it, nothing 
works. So, understanding it is critiail. Luckily, while ifs long, it's 
really pretty siinple, and well-documented. (I really have to prit 
in a commendation to the Nagios team for their documentation. 
It’s an excellent example of how to do usehil documentation, 
and far more projects, commercial and open source Ixith could 
do wcil to learn from Nagios' example.) 
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Tlic nagias.cfg file is really a listing of other configiimtion 
files and settings that apply to Nagios as a whole. For example 
this line: 

J.cig_file=/usr/local/ri^iglos/var/ua gicis . log 

Tells Nagios where its log hie lives. Tliafs llie defaiill 
from a new Nagios installation. Going down nagios.cfg, we 
see the entries for the checkcommands file, the 
misccommands hie, and rhe minimal.efg file, which is the 
very basic Nagios conhguration file, and handy for new 
users, As you go down the list, we see that you can get quite 
complex with the configuraiion files, giving you ilie 
flexibility io grow your Nagios installation to as large as you 
need to be. (Al the high end, you can have clusiers of Nagios 
servers all talking to each other. We're not going to get into 
those here.) 

Other entries in nagiosxfg include the user and group 
Nagios runs as, and whether external commands are to be 
used, (note that to use the Web interface, yE>ii have to set 
check_external_cominands=^l in nagiosAlg) One of 
the nicest things about Nagios is that pretty much every 
entiy in nagios.cfg is nicely commented, so you don't have 
to guess at what any of iliem does. Since this is just a basic 
intro to Nagios, we only need to enable external 
commands. Well leave the rest alone. 

niinimal.cfg 

This file is (obviously) a minimal config file that will let 
you gel Nagios up and running with a minimum of work. 
Wiiile it's not going to be one you’ll want to use for large 
installations, it has evei’>lhing you need to get started. 



I'he first section defines time periods, (can be 
separately defined in timeperio<Ls.cfg). While minimal.efg 
only defines the “24x7' lime i>eriod, you can create others 
to suit your own needs, (working_hours, 
non_w^orking_hours, weekends, etc). The syntax is pretty 
self explanatory; a 'define tinieperiod' block, containing a 
name used by other config files, an alias that can be more 
descriptive, contain spaces, etc, and the days in the 
timeperiod with hours, in 24hr time, lhal each day covers 
in the timeperiod, one j>er line. You can create more if you 
like, or just use the 24x7 one. 

The next section defines the commands Nagios uses to 
talk to liosLs and hosigroups, (can be se[>arately defined in 
checkcoiniiiatids.cfg and misccommands.cfg, misccommands 
is used for things like noiifieaiion commands and t>iher 
commands that dtm'l directly use a nagios command plugin), 
This is where you define the commands that make up 
services. Looking at this section, we see the 
check com mands.cfg file has some commands already set up. 
We’ll skip down past the first two notification commands, to 
the check-host-alive command, as it's simpler to explain. Tlie 
basic syntax is simple: 

§ Command to check to see IT a host Is “alivo'" (up) 

by pinging It- 

a com mem for yoirr use 

define commandi 

—Sturt ih€ command dcfmitkm block 

ctiinmanJ najncchcck-hosi'ativc “tlic niinic ytm refe r to ilic coitiJiiand 
— as In ttic rest of Nagios 

cotnmaTid_lliie SLTSERlS/check^ping H $H0STADT)RF4SS$ -w 
99,99% c 100.100% p 1 
“die aciLi;il conioiiind 

I 


Tlie command string is pretty straigliiforward. The 
$USER1$ macro, defined in resource.cfg, is die path to tlie 
plugin directory, normally /usr/local/nagios/libexec. You can 
use the $lJSFRx$ macros to define all kinds of commands, 
like SNMl^ community strings, etc. You can have up to 32 of 
them, and they make life a lot easier I’he check_tcp is the 
acuta] command executable name, (in general, Nagios 
command [ilugins are of the form cbe€k_<fimctiormame>.)t 
followed by variou.s .switches. A common one Ls the “-H” 
.switch, which is the host address. RiUher than entering it 
manually for every host, we use the $I10STADDRHSS$, 
which is defined in the host entry' for minimal.efg, and well 
see that in a bit. The rest of tlie switches are command' 
spec ific, and are explained by the commands help function. 
You can bring this up in terminal by running 
/usr/local/nagios/libexec/coinmandnaine h in 
Terminal, and this will bring up ihe command's syntax 
definitions, five yet to run into a command where this didn't 
work. Before using a command on a host or ho-stgraiip, it's 
a good idea to use -h to make sure you know' how the 
command works and what it is going to tell you. 

Next up is the contact definition, (also defined by 
contacts,cfg), which tells Nagios who to notify when it 
needs to. Since minimal.efg is by de.sign a simple setup file, 


WWW.MACTICH.COM 










there's only one entry here, although you can put more in 
if you like* The c'ontacUname is how you refer lo Lite 
contact in the rest of Nagios, the alias is there for more 
human-fnendly labeling. Note that you have separate host 
and service notification periods. While they're the same in 
this default, there are cases where you may want them to 
l)e different. For example, a backup service that only runs 
on the weekends woiiklnT need 24x7 monitoring, bur the 
host il runs on would. So you could set U[> a 
"^Ijackui^^adniin'’ contact that only received service 
notifications during :i '‘weekend” time period. 

71ie service and host ncjlificalion options lines arc 
nothing but a set of switches dehned thiEsly: 

d = send notifications on a DOWN state 
u = send notifications on an UNREACHAULE .state 
r = send notifications on recoveries (OK .state) 
f = send notifications w4ien the host starts and stops 
flapping 

n = no host notifications will be sent out 
w = send notitications on a WARNING state 
u = seiKi notific'afions on an UNKNOWN state 
c = send notifications on a CRITICAI state 

Note that "ii” am have tliffereni <iefiniiions dtrpeneJing 
what kind of nolii’ications you have. “Flaf>ping" is the Nagios 
definition for a hcjst that is changing states too often, 'lb 
avoid this you can enable and configttre ‘"flap deiection" in 


nagios.cfg. Flap detection can l)e e|uitc useful if you have a 
balky lu)st or service, or if you're having other problems 
causing hosts or services to look like they’re coming up and 
down a kite 

The service_nc>tificalion_coi!unands and 

host_notification_commands lines are how you need to 
be notified for service and host alerts, (email in this case), 
and then you have a line for the email address you wish 
to use for the notifications. 

Hie Contact Groups sectioji follow^s, tdefineci separately 
in conractgrotips.cfg), and is, obviously, where you create 
cxintact groups. The syntax is similar to tlie contacts 
configuration, (you'll note that Nagios uses as many common 
terms as possible in its config files, which makes things 
easier on you) with the “ineml>er,s” line being a comma- 
delimited list of contacts that will notified when that 
particular contact group is notified. 

Next up Ls the HosLs section, (defined separately in 
iiosLs*cfg)* This is the sectitin wlieie you tell Nagios what to 
monitor. The host definition has, l:>y necessity, a largish list of 
terms, even in nirnimal.cfg: 


define host f 
use 

template to use 

host, name 

alias 

add resn 

has I groups 

c h e c k_c o mmaii d 

max„c h e c k__at tempts 

notificatlori_interv£il 


generic-host 1 Name of host 

localhost 

localhost 

127.0.0.1 

tost 

check hosL alive 

10 

IZO 
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notification_period 24x7 

notificatioTj^options d,z 
eontact_groups adiains 


Tlie use line lelb Llie deriiiliun which tem[:)late to use, 
in this case, ^generic-hosi", cieBnecl just above the liost 
definitions in minimaLc:fg. The templates are handy fc^r 
defining values tliat are going to tx^ common to a host or 
group of heists, (not a hostgrcxip), so that your host 
definitions don’t have to be needlessly long. 

The host_nani 0 is how you refer to the host in the rest 
of Nagios, the alias is for a more human-friendly label 
The address is what is used by the $HOSTADDKESS$ 
ftracro we saw in the cotnmand definitions earlier. It can 
a EQDN DNS name, or an Ih address, i^br servers, I prefer 
the IT address wherever possible, since that way, the DNS 
service' on tny network dropping doesn’t kill Nagios' ability 
to find hosts. One line not in the default, but that 1 included 
here is host groups. You can, if you like, define a hosts 
hosigroups in ihe host definition or a se|>araie hostgroup 
definition. I recommend picking one and sticking with it to 
avoid confusion. The Gbeck_coni[nand line is a single 
command that you can use as the basic "is it tip or not 
coniniand''. This isn't w'here you set Lip all the services you 
check on a host, well look at tJiat later. I1iis is just a default 
command for a given fiost. [nax_check_aitempts is how 
many times Nagios will retry the check_command if tlie 
result is anything other than OK. (Tills only applie.s to the 
check command in the hosi definition, not all services 
ninning against that host). 

notification_interval is how many time units, 
(default is minutes) that Nagios will wait to send out 
notifications of a host that is still down or unreachable. 
That's continuously down. If the host goes up and comes 
hack down, that's different, notification_period is 
the timeperiod that notifications for this host are allowed, 
and use ttie timeperiodCs) set by you. noLificatk>n_optioris 
determine the conditions that notifications arc sent out. 
Usually, you want at least <l,r, so that you know when a 
host goes down, and if it comes hack up by itself, 
contact^groups are self-evident, they're the groups 
who get notified. If you want multiple contact groups, 
then use a comma-delimited list, l^lease note that this 
example is not a complete list of host parameters by any 
means, and you should consult the Nagios dociuiientation 
for a full list. 

Since we just defined tlie host, we should next define 
the host group the host belongs to, and that’s the next 
.seelinn, (.separately in hostgroups.cfg): 

define hostgroupi 

hostgroup_Tiaine test 
alias Test Servers 

members localhost 

3 

As you can see, hostgroups look u lot like contact 


groups. The members parameter is a ctjmma-dclimited list 
of hosts if multiple hosts are used. 

The final section in minimal.cfg is services, (defined 
.separately in services,cfg). This is where you really get 
into the meat of Nagios. Services are how you apply 
commands to multiple hosts with a single entry, and 
notify multiple contacts or contact groups. Services can 
be any command Nagios knows about, and you can get 
quite specific. For example, while there's no specific 
command to check the KDC .status on OS X Server, 1 w^as 
able to do so by using SNMP to check for the KDC 
process by using the following command definition: 

/fcheck_kdc_process_via_snmp command definition 
define commandi 

command.name check_kdc_process_via snmp 

cotnmand_line $USERI S/check_proc_by_Brimp 

$HOST address $ $USER3S $tJSKR9$ 

1 


and wrappiJig it in a service: 

define service! 
use 

: Name of service template to use 
host_name 

servlce_descr.Lptlon 

Check 

iS^volatlle 
checkupsriod 
ma3c_check_att empt s 
normal,. check_lntervai 
retry_check_interval 
cQntact_groups 

admins 

notlflcation_interval 
notification^period 
notification_options 
chec k_c omman d 

cb e c k_kd t_ pro ces a_v1a_s nmp 
f 

Like liQst definitions, service definitions have a 
template option, so you can set common parameters once 
and apply them to all the services that use this template. 
Let's take a look at the default '‘PINO" definition in 
minimalctg: 

define service( 
use 

; Name of service template to use 
host_name 

servlce_descrip Lion 
i!is_volatile 
£:heck_peripd 
max_check_attempts 
no rtfial_check_interval 
ret ry_check_interval 
CQEtact_groups 
noLlfication_oplions 
[iotlfication_interval 
not1floation_petiod 
check_command 

check_pln&1100.0* 20%!500.0.60% 

1 

If we compare the service to the host definitions, we see 
tliat they're cjuite .similar. The u.se parameter is the template 
the definition uses. The bost_name paramter is a comma- 
delimited list of hosts this service runs giants. The 


generic-service 


xserveOl 

SNMP KDC Proces.s 
0 

24x7 

3 

3 

1 

xserve-admJ ns,nt- 

120 
24x7 
w*u, c* r 


generic-service 

]oca 1host 
PING 
0 

24x7 

4 

5 
1 

admins 

w. u, c . r 

960 

24x7 
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iiiax_check_attempts, notification_ifiterval, and 
notification_periods are the same as for the host 
definition. The is_volatile parameter nonnally doesn’t 
apply to sei’vices, and should be left at its default unless you 
have a need to change it The nortnal_check_interval 
setting is how many Lime unils to wail between regular diecks 
of a service. By default, this is set to every five minutes. You 
can increase the frequency of checlts, but this will also 
increase the load on your server and network, and should be 
done witli caution, llie retry_check_interval is how 
long to w^ait l3efore scheduling a 1*e-check’ which only 
happens in ihe case of a non 'OK' return from a check. The 
contact_groups paniriieLLT is exactly liie same as for tlie 
host definition. The check_comjnand is file name of file 
command as defined in the checkeommand definition, and 
any additional parameters the c.:ommand needs. 

Tliat, in a nutshell is ininimuLcfg, and almost all the 
settings you need to get .started with Nagios. However, there 
are still a crouple more files to set up before we're ready to 
start Nagios and gel monitoring. 

cgi.cfg 

Tliis is the config file that controls how Nagios talks to 
the CGIs and wlio can access which CGIs, 'lliis file isn’t too 
complicated, but it has to be correct tor Nagios' web 
interface to work correcily. Like all Nagios files, it's well 
commented. Running dt>wii tile entries, most are self 
explanatoiy, so 1 won’t comment on all of them. One of the 
ones that can catch you off guard is tlte tirl_htinl_pat]i entry. 
Rememi^er, with Mac OS X Server, that’s going to fxr the root 
defined for the site in Server Admin, so you want that to 
point at the path defined hy the phy.sical_html_path 
parameter just above it. 

The use_auihenucation parameter and the access 
control sections that Follow it are critical, and you really, 
realiv want to read the Nagios dociijnentati<)n on how^ they 
work. If you are using a lot of extenial coinmancLs that can 
relxxit hosts, etc, (all possible with Nagios), properly 
configuring your CGI access contnils Is critical to Lite 
security of your Nagios insiallaiion. 

The statuswrLindude paiameter Is if you w^ant to create 
a 3-f> VTML tlythrouglV view of your network, it's not really 
any more useful than any of file 2-D views, but it s pretty 
cool for corner office types. Hie rest of the ojitions can lie 
left alone For an initial installation. 

Testing Your Configuration 

OF course you read all the docs and did everyfiiing right, 
i^Lit just in case, Nagios gives you a way to test yt>ur config, 
via ilie “V option for the nagios executable, llie syntax is 
<path to the nagios exccuLable> -v <path to nagios.c:fg>. So 
for our examjile, we’d use: 


/usr/local/nEgios/bin/riagios -v 
/usr/locai/nagioe/etc/nagioe,cfg 

If we did everything right, Nagios will tell us, and we 
can start it up. if there are config file errors, Nagios will do 
its f>est to give you llie File name and the line number with 
the eiTor. 'Ihis info has always l>een fairly accurate in my 
experience, so just look where Nagios tells you, and you 
slionld be able to find any errors quickly. 

If you didn’t get any errors, then let’s start nagios as a 
daemon. lliLs is done by using the -d switch as l>elow: 

/usr/local/nagios/bin/nagios -d 
/usr/local/uagioe/etc/nagios.cfg 

Once that’s done, run top to make sure Nagios is 
running. If it is, congmlu la Lions, you tiave a working 
Nagios installation. If not, run Nagios with the -v option to 
see what you may have missed. Checking sy.stem.lQg can 
help here as well. 

Conclusion 

Well, we’ve gone over a liasic Nagios configuration 
setup guide, (and corrected some errors from pan 1). In the 
fiiird pan of this, well take a look at tlie actiufi interface, and 
gel an idea of wliai we’rc^ looking at when we check on 
Nagios, along wifi) .some of the email notifications you might 
get. Tlianks! 

Bibliography and References 

There are two sites that you really must get familiar with 
to use Nagios. http://www.naQios.orQ/ is the main Nagios site, 
and has tons of excellent information ff>r you to ii.se. The 
Ollier is http:y/naQiosexchanQe,oro . the l>iggest collection of 
Nagios plugins you'll find anywhere. 
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Enhancing Applications 

Writing a Menulet 

Extension 

Extending an Application or Providing a Service via a Menulet 

By Andrew Turner 




Introduction 

Mofit modern openiLing syiiLems have some 
constantly viewable area diat displays useful icons, 
data, and notifications relating to your computer and 
olliLM' services. Windtjws uses the 'task Lray\ die Linux 
freedesktop.org specifies a 'system tray’, and Mac OS X 
uses the menubar. On the Mac, this menubar is where 
users see the date/time, audio volume, spotlight icon, 
and any other number of tools ifiey can install to 
display information. 

The menubar icons and tools are frequently called 
‘nicnulels’, or status items. Menulels can he an application 
unto themselves, such as MenuMeters 
( http://vww.raQingmenace.com/ software/fnenumeters/ ). which 
disjilays the current CPU, memory, or network usage as 
graphs and blinking lights. A menidet can also extend a 
larger application such as DeskiopMannger's 
( http://desktQpmanaQer.berlios.de/) menulet that allows a user 
another means to swatch between multiple virtual 
desktops and can display the current viewable desktop. 


Figure 1: Example Menubar with Menulets. 

Figure 1 shows an example menubar with die 
menulets (from left to right): DesktopManager, dialling 
Clicker, Applescripl Menu, MissingSync, MenuMeters, 
Date/l'ime, Audio, and Spotlight. 

lliere are two major 'flavors’ of menulets: the 
.standard and ptdTlicly docunienied NSStatusItem and the 
private and undocumenLcd NSMenuExlra. 
NSStatusItems are fully capable of doing most anything 
a menulet can do, 'File one major benefit of an 
NSMenuExtra is the ability to mouse-dmg reorder the 
menulet with regards to the other system menulets, 
whereas NSStatusItems are placed further along the left¬ 


side of the menulets area of the menul:)ar. Because die 
NSMenuExtra API is undocumented, and subject to 
change by Apple whenever deemed necessary, it is best 
to avoid using die APT in your at^jdications. 

The rest of this article will lead you through 
developing your own NSStatus/tem mentdet Including 
displaying text or an icon in the view, making a drop- 
menu and setting up automatic updating. 

Creating the Menulet 

'Fhe first thing to do is create a new XCode project 
for building this tutorial. A Iter natively, you could add 
these files and resources to an already existing 
application. Menulets must l>elong to an application 
since the .staais bar will not retain and iipdaie your 
Tnenulet for you. Tlierefore, for purfioses of illustration 
and testing we will be creating a new, stand-alone 
application for controlling our menulet. 

The example menulet will display the 
user’s external IP address in the meni3 bar. The 
external IP address is obtained Liy querying a remote 
.seiver and ilicn setting die text in the menubar to the 
external IP address. 

In XCode select I^ew Frqfect... and choose to 
crculc a Coc<}a Application. After I lie new project is 
created, right click on the Classes folder and choose 
Add > New file... You will be adding an 'Objecrive-C 
clas.s’, and name it 'iPMenulet.m”. Make sure to leave 
*Alst> create IPMenulet.lp ciiccked. 

The application will need to hold a reference to the 
NSStatusftem, as well as initialize the menulet, add it to 
the system status [:)ar, and update data in the menulet. 
Add the following code to the IPMenuleLb and 
IPMenuietm files you created in your project. 
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IPMenulet.h 


©ititetface IPHenulet ; NSObject I 
NSSratufiTtem 's^atuBltetn: 

J 


-CIBActionj upUat eiFAdd resa:{Id)sende r: 

IFMcnuletan 

-(void)dealloc 
f 

latatusltetn releaaej t 
[super deallocj t 

\ 

- (void)awaksFromNib 
1 

statuslLem = [ [ [MS^itatusBar systemStatusBarl 

statUKIteraWlthben^lh:NSVariablcStatusTtemLengthl 
retain]• 

[atatualtem setHighiightMode^YES]: 

[statusltem setTltle:[NSString 

stringWithString: .0.0,0*’J J ; 

[statualtem setEnabled;YES]; 

[atai uaTrofu setToolTlp r@**IPMe£iulet*'] : 

[statualtem 

setAction:@selector(updatelPAddreas:)]: 

[statualtem setTarget:self ]x 
i 


The t:ode aixwc crciilcs and aUaclies a new 
/VSSlattdsiiern of variable length to the system status bar. 
Since the status item is variable length, the area wilt grtJw 
and shrink depending on tlic amicnl of the status item's 
title or icon- Alternatively, you could set the length via the 
stcHusJtem WithLeng th: method itj 

NSSquareStatus!temf,en^th, which would fix the width of 
iJie status item to the height of the status bar (currently 
always 22 pixels high). 

'Ihe panimeter hi^hli^htMode specifies if a box is 
dniwm around the menulet when clicked, and ertahied 
decennines if the menulet is grayed out or darkened Since 
we don't yer know our 11^ address, we will set llie initial 
display u> OMM.O, and tlie loollip is what is displayed 
when a user hovers their mouse over the menulet. 

At the end of the initializaiion code there are the 
setActum: and setTargel: functions. Similar to other 
applications, these functions set the functions that 
should be called when a user clicks on the menulet. In 
this example, we will be updating tfie IP address 
wlienever the user clicks on the meniihar It is also 
possible set the double-click action if desired. 

We now need io implement the updateJPAddressr 
method. 

IPMenulcLm 

- (IBAction) updcitelPAdiirf^ss; fid] sender 
I 

NSString *lpAddr = LNSStritig 
St r ingWlthContent sOf URL : 

tNSUKL URLWithString: 

©"ht tp : / /hi ghesrthorblt *caci/service/TQyip.php" J1 : 
if (IpAddr 1= NlttX) 

[statusiteto satfitle: 

[NSString strltigWithStringiipAddr] ] ; 

1 
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Tlit^ updatelPAddress: function the IP address as 
a stfii:ig from an external server query and then sets the 
title of the NSStatusItem. 

Building tlie NIB Interface 

We now have all of llie code that we need . However, 
when the application starts, it needs to know to create the 
nienulcL Tlierefore, wc will create an instantiation of the 
menulet in the NIB file that is loaded. This will allow us 
to later ad<l more ccxie and hooks to our menulet for 
conLR)lling menu items. 

To cteate tile menulet doulile-click the MainMenuMib 
in the Resources folder of the project. After it loads, click the 
“Classes’" tab, then choose “Classes” in the menol-Jar, “Read 
Files...”, navigate to IFMenuIelb and “Parse”. 



Figure 2: Parsing IPMenuleth into Interface Builder 
allows it to be instantiated as part of the application. 


I'his parsing loads the IPMenulet interface into 
Interface Builder. We still need an instance of the class 
CO use in our application. Riglit-click “IPMenulet” in the 
pane view and click “Instantiate IPMenulet”. 'I'his will 
place a blue-cube and IPMenulet instance in our 
Interface Builder window. 

At this point we don’t want a main application window 
to pf^p-np at startup, so click the Window icon and delete 
it. Then save the nib file, return to XCode and chtKxse the 
“Build and Go”. 

Depending on how^ many meniilets you already had 
in your slatu.s l>ar you may have Lo click otiLside of XCode 
since XCode has a large number of menubar items. You 
should see OMM.O. Click on the menulet and after a short 
pause you should .see an updated IP addre.ss. 

Removing the Dock Icon 

rf you are making a menu let-only application, having 
a dock icon seems like an unnecessary item. IL is pt>ssiblc 
to have an application diide' its dock icon by specifying a 
new value in the “Inficplist” file in yciur XCfxle project. At 
die end of the list, just before, the </dict>^ add the 
followmg key and valuer 

<key>LSUTEleTrLf!nt< /ke.y> 

<Btrlng> 1 </ st-ring> 

Now when your menulet application starts up, it 
doesn’t have a dock icon. Be careful however, as you 
currently have no easy means to your menulet 
application either. While developing, it is possi[>le to qiut 
the application by pressing the “Scop” icon in XCode. 
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Using a Menulet Icon 

You now have a hilly fumtional inermlct application 
that rakes up a lot t>f valuable menubar space. For some 
men LI lets, it may be liest to use an icon that the user will 
click for more informatkin, or an icon that changes 
depending on the state of some application variable or 
other data source. 

UniccKle Glyphs 

The simplest way to add an iconic view to the 
menulet is by using a Unicode character lor the title. This 
has several Ix^nefits, such as not rec^iring the design, 
creating, and loading of an image. Also, when a user 
trlicks t>n a menulet and it becomes highlighted, the icon 
should have an 'inverse' view that inverts iJic colors of the 
icon in some way to alert the user that the menulet has 
lx:en clicked. The title of a status item, and therefore a 
symbolic glyph, is automatically inverted. 

Finding a good glyph (symbol) Is a bit tricky. In the 
end, we need the liex value for a Unicode chanicter. Mac' 
OS X provides a very nice tool for looking at Unicode 
characters, though it is a bit buried. 

Go to System Ptv/erences, hitenuit/omit and check 
Characier Palette. AJter you do this you will .see your 
cuirent input language hag in the mcrnubar (look, anotlier 
menulet!). Click on the Hag and choose Show Character 
Palette. Tlie character f>alette window pane will pop-tip and 
stt alxjvc all of your other windows. At the lop of the pane, 
tliere is Vieti}: and a drop menu. Click on the drop menu 
and chcK)se Code Tables. You can ntiw navigate through all 
of Lite Unictxle characters. When you find a glyph that you 


w^anl Lo use, click on it and then get the Uniaxie: value next 
to tlie zoc:>med in view of the cliaraeter 



Figure 3: The Character Palette is a veiy useful tool for 
finding glyphs and their associated Unicode hex values. 
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Now armed with a Unicode value, return to tlie 
IPMenuleUn file and replace the 

fatfltusltem setTitle: [NSSstting 
ntringWithStrlng^e'^O.O.O.O'^J] : 

with a formaiied string iLsing one (or many) hex values die 
Forinatter is %C. Therefoi'e, the following code will prcxluce the 
??symlx)l: 

Istatualtem setTitlei[NSString 
St rl ngyitbForitiat: . 0x2295 J J s 


IPMeniiiet m (a wa ke From N i b:) 

HSBundle 'bundle = [NSflundle bundleForClass:[self 
Claris] 11 

MSSirlng *path = [bundle pathForResource:^"IPMenuIccjn" 
urType;@’*tif‘] j 

menulcofi™ tlNStinag^* InltWlthContentEOfFileipath] ; 

[statusltem setTille:[NSStrIng stringWlthStrlng:#"”]]: 
fstatusitem setlmage^menuicon ]\ 

(dealloci) 

[menuICQii releaseJ-4- -_ 


Image Icons 

While using a l>uilt in glyjih is very simple, it does not offer 
the flexibility an icon provides. *llie NSSkHusltmn APT pnjvides 
the setImage:(NS!mage^) hr net ion it> set the icon. Tlie ful lowing 
ccxie obtaias a 22x22 pixel image t!tat has been added to the 
project resources, wdiich is then stored and set to the status items 
image. You can use any small ia>n in your pn>jcct tliat you want. 
For purposes of this example, dtc icon is “fPMeniilcon.Tir, 

First, add a [lointer to an NHlmage to the data members of 
llie IPMenulet class, 

IPMcnuleLh 


Test this new version. You should see the icon in the 
tieadcT Wlien the icon is clicked, the IP address is filled in to 
the right of the icon as shown in Figure 4. 

6D 66.209.99.195 


Figure 4: The Menulet with both an icon and text title. 

Adding a Menu 


NSImage *menulccin: 


Tlten we need to get the Ixmdle, liic [xilh, and hnally the imitge at 
this path. We will store lilts image for futuie reference if we want 
to .show or hide the icon de|>?ndiog on the menulet s state. Wc al.st) 
set the title to an empty string although it is allowed to have Ixjth 
an image and text in ilie status item. Make sure to release the icon 
wfien the applic'ation quits. 
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The menulei has shaped up mtlter nicely, but is limited 
to a single line of information and a single action w^hen 
clicking, it is possible to extend the menu let by adding a 
menu to provide more information anil interaction willi user 
such as bringing up A bout” l>oxes, “Preferences..,”, or 
displaying the IP addrc.ss in the menu and keeping the 
menulet itself to a single icon. 

First we will nitxlify our code to include the pointer to 
the menu and a menu licni we will be creating by adding the 
following to the IFMmuiet interface definition. 

IPMenuleth 

IBOutlet NSXt?nu 
KSMetiuItem *ipHenutt<?mr 

Now we need to build the actual menu. Douhle-t'lick the 
MuinMernuiib file to bring up Interface Builder. The first tiling 
to do is to iiptlaie Inlerfate Builder's ktiowleilge of the 
iPMenuiet class. We need to double click the IPMenulet 
instantiation, nght-click and choose “Head IPMcnulct.h”. After 
this is complere, return to ihe “Instances” iai>. 

('iKXKse Ihe “Ccx'oa-Menus” tab from tlie Interface Builder 
paiette. Drag and drop the menu icon in the lower-righi comer 
to the MamMetm.nih panel, lliis will add an NSMmul item to 
our nib file. Rename the first item “External IP” and clelete the 
second tttenu item. 

Next we connect the menu to our class. Control left-click 
and drag from the IPMenuhi instantiation to the new 
NSMenui and connect ib^Menu data member of the class. 

Wc assigned the menu to the class, but now the menu 
now needs to be assigned to IPMenuhL Return to XCode 
and modify the iPMenuieUn Hie to use instead of 

calling the upiiateiPAddress: selector. We’re also going to 
dynamically create a menu item that is the external IP 
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address and .set il to update the IF address when the user 
clicks it. 

rPMcnulet.m (awakeFroiiiNib:) 

[tftatusTtem RetMesnu^theMenul : 

IpHcnuItem f[NSHenuItem allocj initWithTltie{},(},0.0*^ 
action .'^selector (iipdatelPAddress:} 
keyEquivalent ; 

[ipMenuItem setTaeget:selfjj 

[theMenu lnsettltem:ipKenaItetii atIndexU] : 

Tlie menulet will know to call and expand llie menu on a 
user click. Iliereforej commeni out: 

// (suiusUtm seiAcdon:@selector(updatclPAddfess:)ji 
// fstatusltem seiTargcuselfl; 

We also want It) ii^xlaie the IP address menu item with the 
new 11^ addre.ss. Tliis is a suiiple change, instead of setting the title 
of liie statusitetn, we want to change the title of the ipMenuIiem^ 

IPMenulcUm (ufKlatelPAddrcs:) 

[atatusItoBi setTItiet[KSStrlng stringWithString:ipAddr]]r 
liecomes; 

tipMenuItem setTltle: [NSString iitrlngWithStrlng:ipAddr] 1 ; 

Click ‘‘Build and Gcf again to see the newest results. You 
will only see the kon in the menubar. Click on this to expand 
down your new menu. Click on the IP Address to have it update 
and change the menu item. 


S ET 800 MB . , ^ 

® 1 716 MB U 


External IP Address 
66.209,99,195 



Figure The menulet with a drop-down menu. 

Automatic Updating 

To diis point we have made a menulet that has either an 
icon or text in the status !>ar, and updates the IP address 
when the user interacLs widi the menu item. By contrast, most 
menu lets provide the user information wit ho til requiring 
inieraction from the user. Therefore, ii is often useful to use 
a timer to automatically update the menulel. This allows the 
menulet to provide up to dale information without re(|uiring 
constant interiiaion from a user. 

This example hardrodes the timer interval to a 
predetermined value that seems adequate for the task, 1000 
seconds. However, it would useful for more advanced 
menulets to include a preference pane or sclectaiile menu items 
for setting a variable update rale. 

Add the following sections of code to your source Rles- 

IPMcnuleth 

MSTiwee 'updateTimet: 

IPMeiiiilet.m (awakepromNib:) 
updateTiroer ■* HNSTimer 
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sehedul^dTimerWithTiiDelntervdl • (lODO.O) 
target;self 

selector : ^selector ftipdatelPAddress :} 
userlnfo:nil 
repeats;YES] retain]: 

LupdateTimer fire]: 

Cdealloc i ) 

rupdateTimer release]i 


I1ic timer bi btiili with 1000 second delay, and when it ‘Ores’ 
(timer ain^s out), it will call f>iir updittelPAddtvss: selector. 'Ilie 
timer will continue firing for as long as the application remains 
active {jvpeaLK is set to YtlS). 

build and run the uptfated application. The IP address 
I wifi l>e updated immediately uptm startup. It will then he 
updated every 1000 seconds. If you want to double-check 
your timer, change the timer interval to 10.0, and add 

Istatusltem serTItlc:[NSStrlng 

RtritigWithSt ringt^’^Updating'*] ] i 

to the beginning of the update!FAddwss: functiotr At the end of 
the him lion, add; 


Keep Your 
Rack Mount 
Equipment Quiet 
And 

Locate It 

Where You Need it 


Noise Reducing 
™ Rack Mount 
Enclosure Cabinet 


[fitaiusltein setTltle; [NSStrlng 
stringWithString:e‘*^l ] ; 


Tlie>se additions wall cause the menu lo print '‘Updating" in the 
menu bar while reirieving the external IP address* 


(Conclusions 

You Ve now^ sut'cessfully developed several iterations of a Mat^ 
OS X numulet. Etich variation has dilTerent uses, depending on die 
desired inlonnation to lie displayed, and user interaction required. 
Kurthemiorc, menuleLs as clescTilied here can made either 
stand-alone or as pajt of a larger application. In a larger 
apjilicaiion, the menulet’sS selecTors and menu items would lie 
connected to tlie application’s (!(Kle and data. 'Hiis ty|x.* of inlerface 
provides users with a jKilcnlially iLseful resource for quickly 
gleaning informaiif>n from your application, 

Menulels also provide an interface for drawing to an 
iWSView. This capability allow.s a developer limitless freedom 
in drawling icons, graphs, hlinkcn-ligliis, t>r anything else in 
their menulet, 

Por more inlonnation on the NSStarusItem API, check out 
the Apple developer dfK'u mental ion: 

http://dev elo per.apple.com/clocumentaTion/Cocoa/Reference/Applicatio 

nKit/ObjC dassic/Classes/NSStatusItem.html 
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APPLESORIPT ESSMNf lAtS * by Bienjoiif/n S; Wa/d/e 


Introduction to 


I 

Iatabase Events 

1 

f 

r 

( 

s 

ata storage and access is an important part of 

1 J AppleScripting, particularly in complex AppleScript-based 
projects. Some scripts may need to store user-entered data 
or later reference, perhaps during an entirely new session. Some 
nay need a location to log activity or errors during processing. 
Others may need to access structured data, in order to do 
lomething fairly complex, such as building a catalog. 



In this muniii's cokinin, we will tlisaiss llie use 
of DaUibase Events, a new and exdtinj; foiojre in 
Mac OS X, for storage and accx^ss of data durinj» 
script execution. 

Data Storage 
and Access Option 

There are many tcchni<;|ues that are 
commonly used to store and acce.ss tlata with 
AppteSiTipi* One common method is to 
simply write information to a text file on the 
user’s hard drive, on a server, (^r elsewliere. 
This t:an he done with the Hie Reml/Write 
Commands suite in the Standard Additions 
scripting addition, wliich is installed as part of 
Mac OS X. This technique of writing 
information to a text file may suffice for basic 
types {)f informational storage. However, 
depending on the complexity and amount of 
data being stored or acce.ssed, you may need 
to write parsing code in order to work with 
the informaficjn. 

In AppleScript Studio projects, another 
meihtjd of data storage and access is to make 
use of a projeefs preferences file, i.e. it's piisl 
file. This is actually quite easily done, and is 
a common technique for storing such 


information as persistent user interface options and 
settings. 

I'or complex data storage and access, a more 
robust solution may be necessary, 'rypically, 
developers will turn to a database of some kind. 
FileMaker Pro is usually quite popular among 
AppleScript developers, primarily due to its ease of 
use, CLisiumizabte interface, and rt)bu.st AppleScript 
support, for those nut familiar with FileMaker Pro, 1 
highly recommend downloarling the 30 day demo 
from FileMaker's website at http://www.fi)emakercom . and 
checking it oin for yourself. 

With Mac OS X Tiger, there is a new option - 
Daialnise Events! If you have never heard of Datalzase 
Events, that is not surprising. Database Events was 
released as part tjf Mac OS X 10.4 Tiger. However, it iiuiy 
have lx:en mis.sed by many, as the only mention of it that 
I could easily find was a small blur)') on the AppleScript 
webpage at http://vvvvw.apple.com/macosx/featufes/aDplescript/ . 
In this month\s column, we will exjilore Database Events* 
syntax, and discaiss ways tluit it can l>e imegraied into 
your own scripts in order to store and access data during 
script execution. 

What is Database Events? 

Database Events is an AppleScriptable background 
application, which comes installed with Mac OS X 10.4 
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and lup;fier, if is located in tlic System > IJbmry > 
CoreServices folder, which you may recognise as the 
location of other scnfHable background applications ihai 
are installed with Mac OS X, including Image Hvents and 
System EvenLs. 

Like its name implies, l>aiahase Events provides a way 
for AppleScript to |?erforiii l^astc events with databases, in 
particular, SQLite databases. Tasks that can be fierformecl 
with l)atal>a.sc‘ Events include creating, opening, and 
sjiving databases, as well as arx'essing records and fields 
within databases. 


For information about SQLite, visit 

http://www.sqlite,org/ . 


By default, Database Events does not appear in the 
Script Editor’s Libraryf palette, which is accessible via 
tlie Window > iJhrary menu. Click the + buium in the 
Libmfy palette, and navigate to Database EvenLs in 
or<ler to add it to the palette, lIuls making it quickly and 
easily accessible whenever Script Editor ts launched. 
See figure 1. 



Figure 1, Script Editor Library Palette 

Once added to the l.ibmry palette, you may double 
click on Database EvenLs in order to open its 
A[)plcScnpt dictionary. See figure 2. 



Figure 2. Database Events AppleScript Dictionary 
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If yau launch the Activity Monitor apf>lication, located 
in the Applicaiitms > (Jiilities folder on your triad tine, 
immediately after logging in, you will notice that Database 
EvenLs is nor launched by default. To launch Database 
Events, use the launch command. For example: 
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tell application "Database Events" 
launch 
end tell 

As with any other application, when you are ready to 
quit Database Events, you may iLse the cjuil command. 
For example: 

tell application "Database Events" 
quit 

end tell 

Please note that, in order to preserve memoiy, once 
launched, Database Events will automatically quit after 300 
seconds, i.e. S minutes, of idle time or inactivity. When this 
occurs, it is imponant to note tliat any unsaved clianges in 
any opened databases will be k)sti Because of this, it is 
essential that you write your AppleScript code to save any 
database you may lx: imxlifying on a regular basts. We will 
disruss saving databases a little bit laier. 

If you require more than 5 minutes of inactivity^ (hen 
it is aaually possible to adjust the delay j>eriod by 
modifying tlie value of the quit delay property of the 
Database Events application. For example: 

tell application "Database Events" 
set quit delay to 600 
end tell 

In the example cxKle above, the c|uil delay is changed 
from the default 300 sectinds to 6(K) seconds, or 10 
minutes. Alternatively, you may also choose to decrease 
the default delay period by setting (he quit delay 
property to a value of less than 3iX) .seconds. Please note 
that, when modifying the value t)f this propeity, it will he 


reset to 300 seconds again the next time Database Events 
is launched. 

You may check the value of the delay period by 
retrieving the quit delay property. For example: 

tell application "Database Events” 
quit delay 
end tell 
-> 300 

In some cases, you may not want Database Events lo 
c|iii( automatically at all. To disable automatic quitting 
eniirLiy. set the quit delay property to a value of 0. 
For example: 

tell application "Database Events" 
set quit delay to 0 
end tell 

Working with Databases 

Now that we have discus.sed tlic Ixistcs of the 
Database Events application, let's move on to databases. 

According to T‘)aLabase Events' AppleScript dictionary, 
the database class is an element of Llie application 
cla.ss. Tlie dictionary also Indicates that a dam base 
fK>ssesses a name properly and a location property. 

You can instruct the Database Events application to 
create a new database by using the make command, 
and specifying a name for the database. For example, 
the following .sample code will create a new database 
named ‘'Super Heroes'', and you can see that the result 
of the command is a reference to the newly created 
database. 
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tell application “Database Events” 

make new database with properties tname:"Super 
Heraes"1 
end tell 

“> database “Super Heroes” of application "Database 
Events" 

Once a databa.sc hu.s crcateci, you can access it 
hy its name, or by its index, I'or example: 

tell database "Super Heroes'* 

- OR 

tell database 1 

The following example code demonstnites how to 
retrieve llie properties of an opened database; 

tell applicatlori “Database Events" 
properties of database 1 
end tell 

—> I class;database, name:"Super Heroes", 
location : “'"/Documents/Databases" ) 

Wlien accessing llie projXTties of a newly created 
daialrasc, you may notice that the location pnijxjrty of llie 
dalalxise is set to a value of ‘'-/Documents/Databases” 
by defaiiU. This does not mean tliat tlie database liiis actually 
been t:Rraled in this kxration. In fact, this folder miiy not 
even exist yet. It simply means that tliis is the location in 
which the ebtab^use will c realed, once a save command 
has lieen issued, or once a lecord has Ixen cTeatecl 

Oplitjnally, when a database is created, you may d)(H)sc^ 
to indicate a custom location for the cluafiase liy sixcil'ying 
a value for ihe location f^Rjjierty. f-or example, the 
following code will prompt the user to seletl an oulpuL 
folder. It will then CR^ate a new tbtalxtse witli a location 
property Vtilue of the folder specificxl' by the user, 

set theOutputFoider to choose folder with prompt 
"Please select an output folder;" 
tell application "Database Events" 

make new database with properties I name:"Super 
Heroes". location;theOutputFoiderl 
end tell 

—> database "Super Heroes" of application "Database 
Events" 


lb silve an opened daialxtsc at any time, use die save 
command. This will cause the database to l^e saved into the 
value sjKx:ified in the datalxise's location property, using 
the n;ime specified in the name pnjpcrty. For example: 

tell application "Database Events" 
save database 1 
end tell 

—> database "Super Heroes" of application "Database 
Events" 

To op>en a saved database, use the open conunand. and 
speedy die padi of the database file to l>e opened. However. 
pleiLse note that you must s|iecily this path as a POSTX style 
padi. Odierwise. you will rex^eive an eritsr message. For 
example, die following cxxle will open a datalxtse named 
Sufx^rllemes.dhef} on my deskUip. 

set theDBPath to POSTX path of "Macintosh 
HD;Users:bwaldie:Desktop;Super Heroes,dbev" 
cell application "Database Events” 
open database theDBFath 
end tell 

“> database "Super Heroes" of application "Database 
Events” 

To determine die numlxr o{ opened databases, use 
the count command. For example: 

tell application "Database Events" 
count databases 
end tell 
-> 1 

To dose a databa.se, use ihe close command. In 
order to eliminate the ]possibility of receiving an error 
when aLLempting to close an unsaved modified database, 
specify a value for the saving parameter. For example, 
the following c(Kle wall dose a database without saving. 

tell application "Database Events" 
close database 1 saving no 
end tell 

Working with Records 

Otice a dalaba-se- exist.s. ycHi can now' Ix^gin crejiting 
records within diat datal>ase. like creating cHtalxises. Lite 
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make command is iised lo create new records. Uecotxis 
ptxssess an ID finiix^rty and a name property'. A value for 
Uie ID property is aiuomatically assigned a unique ID 
niiml>^r when a record is creaied. However, a value for the 
name properly must be specified w^henex-^er a recoRl Ls 
created. The foUow'ing example cx)de demonstrates liow a 
new recoixi is created, using a sfXidfied name. 

tell application ^Databasse Rventa’' 
tell database "Super Heroes" 

make new record with properties t name:’’Batman" I 
end tell 
end tell 

--> record id 157660455 of database "Super Ileroefl" 
of application ^Database Events" 

You can see that, m this case, the result of' the make 
command Ls a reference to the newly created record, and 
that a unique ID of 157660455 iias l>een applied. 

Once a record exists, it may be referred to liy its 
index, its unique ID, or its name. For example: 

tell record 1 

- OR 

tell record Id 15/660455 

- OR 

tell record "Batman" 

To coiini die records of a database, use the count 
command. Tor example: 

tell application ^'Database Eventa" 
tell databsjie "Super Heroes" 
count tecordfi 
end tell 
end tell 
-> 1 

You can delete reci^rds in a database by using the 
delete command. For example, the following ct>dc 
demonstrates how to delete every record in a specified 
database. 

tell application "Database Events" 
tell dfltebasc "Super Heroes" 
delete every record 
end tell 
end tell 

Working with Fields 

Once a record has been created, you must create 
fields to Ixf populated waihin that record, 'this must he 
done every time a new record is created. Fields may not 
be created at the database level in DaLa]>ase Events. 

By default, a name field already exists when a record 
is created, and it contains the name of the record. You 
may create additional fields by using the make command. 
Fields have a name property and a value property, 
whicfi may be specified at the time of field creation. 

Tile following code demonstrates liow lo create a 
record with two fields. The first field, called name, is 
created automaiically and assigned a value of B^ittnan 
wlien tile record is creiited. 'The second field, called Secrei 


is tussigned a value of Bruce Wayne when the field 
is created. 

tell application "Database Events" 
tell database "Super Heroes" 

set theRecord tq make new record with 
propertiefi [name:"Batman"1 
tell tbeRecOrd 

make new field with properties (name:"Secret 
Identity", valuG;"Bruce Wayne"! 
end tell 
end tell 
end tell 

—> field "Secret Identity" of record id 157660455 
of database "Super Heroes" of application "Database 
Eventa" 

To count liie fields of a specified record, use the 
ct>unt command. Tor example: 

tell application "Database Events" 
tell database "Super Heroes" 
tell record "Batman" 
count fields 
end tell 
end tell 
end tell 
-> 2 


Pulling it Together 

Now that we have discussed creating databases, 
records, and fields, let'.s pull il alt logeihcr. T1ie following 
example code demonstrates liow to create a new 
database of records, based on a list of data. The 
database’s name will be Super Heroes, and it will consist 
of a record for eac h super hero. Each record will contain 
a name field, and a secTet identity field. Once buiii, the 
database will l')e saved into the default location, the 
Documents > Databases folder witliin your user folder. 

set theSuperHeroes to (("BaHnan", "Bruce Wayne"!, 

I "Spiderman" * "Petei: Parker"!. ("Superman", “Clark 
Kent"!I 

tell application "Database Events" 

set theDatabase to make new database with 
properties I namei"Super Heroes"I 
tell theOatabase 

repeat with a from i to length of 
theSuperHeroes 

set theCurrentSuperlteroTnfo to item a of 
theSuperHeroes 

set theRecord to make new record with 
properties I nanie : item 1 of theCurrentSuperHeroTnfo 1 
Lell theRecord 

make new field with properties 
Ename:"Secret Identity", value:item 2 of 
theCurrentSuperiieralufo ] 
end tell 
end repeat 
end tell 
end tell 

Now that you have a daiabasc, complete with fields 
and records, you can search for records in a variety of 
ways. For cxanipie, the following code demonstrates how to 
locate a record by name: 

tell application "Database Evenis" 
tell database "Super Heroes" 

first record whose name = "Supemati" 
end tell 
end tell 

-> record id 157661083 of database "Super Heroes" of 
application “Database Events" 
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11ie following code demonstrates how to ItK^aie a recortl by 
the value of tme of its fieids: 

tell application “Database Events'* 
tell database **Syper Keroea** 

first record whose value of field “Secret ldentlty“ 
eontaina “Parker** 
end tell 
and tell 

'> record id 15/6/2965 of database “Super Beroes” of 
application "Databaae Eventfl" 


You can aiso retrieve and modify the values of fields in 
existing records. 'I'he tblkiwing exaiiiple ctKle demcjnsirates 
iiow to retrieve ilie value of a speeilied field; 

toll application “Database Events" 
tell database “Super Heroes” 

set theRecord to first record whose name = 

“Superman’* 

tell theEecord 

value of field "Secret Identity" 
end tell 
end tell 
end tell 
-> ‘-Clack Kent" 

The following ctxle demt>nstraies how to modify tlic value 
of a s]:x.'cified field: 

tell application “Database Events** 
tell database “Super Heroes" 

set theRecord to first record whose name " 

"Superntan“ 

tell theKecord 

set value of field “Secret TdentUy" to "Kent. 

Clark" 

end tell 
end tell 
end tell 


In Closing 

As you can see, there Ls a lot tliai can be done with 
Database HvcnLs. I encourage you icj liegin using it, testing it 
on your own, and integrating it into your scripts. Wliile 
Database EvenLs Ls not as robiLst as a fully featured database 
application, it can provide a quick and easy way [o store and 
acces.s structured data. 

Also, pic'ase lx* aware tliai Database Events Ls currently at 
vei^iun l.t). As it continues to mature, I am sure ihat it will 
continue to grow and will become an im[)t)rtant [xiri of many 
AppleScri pi-based workflow.s. 

Until next lime, keep scripting! 
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Learning Unix for Mac 

OS X Tiger 


Learning Unix for Mac OS X Tiger is 

O'Reilly's fourth revision of this popultir volume 
on Unix basics for Mac OvS X users. This 
edition's autltor, Dave Taylor, is a well-known 
and highly respected Unix geek with many 
diverse publications under his bciu Learning 
Unix for Mac OS X Panther, Creating Cool 
HTML 4,0 Web Pages, Solaris 9 for 
Dummies, The Complete Idiot's Guide to 
Growing Your Business With Google, and 
Wicked Cool Shell Scripts, among others. 

Although Learning Unix for Mac OS X 
Tiger is intended for Unix new[>ies, the content 
is surprisingly extensive and so well organized 
that this book can easily act as a refreslicr 
volume for even power Unix users, especially 
those new to Mac OS X. 

In the first three chapters, 'laylor quickly 
covers a great deal of ground as he introduces 
Unix, the CLl (command line interface) and Mac 
OS X Terminal basics, runs through an overview 
of the Mac filesystem (directory structure, 
patlinames) and delves into conuHands and 
optional switches related to navigating and 
exploring directories and files (cd, Is, pwd, 
etc.), 'rhe reader tjuickly becomes familiar with 
custom 1 zing the Terminal interface, entering 
commands and configuring advanced shell 
settings. Using the basic commands outlined in 
these chapters, Taylor also leads the reader 
through ’ several important directories 
(Library/Preferences and /var/log for 
example) and takes some time explaining file 
permissions. lie includes a good illustration of 
how to look at external volumes like attached 
iPods and digital cameras using Is. 

Chapters 4 and 5 take the reader to file level 
management with explanations of file and 
directory name syntax; wildcard usage (^, ?, 
[ ]» commands used to look inside files 

(cat, less, grep); command line editors 


By Mary Horbury-Glaser 

(u.sage instructions for vi and brief overview.s of 
nano/pico and emacs); how to organize files with 
mkdir, cp, mv, and rm; compressing and archiving 
Files using gzip and tar; using grep h>r pa Hern 
matching within files; and finding files using locate, 
find, mdls, and mdfind. 

Rcxlia-xting standird input and ourpiii is c:overed in 
Chapter 6. Taylor clarifies redirettion, pijx‘s and filters, the 
use of associated commands (cat, tr, wc, head, tail, 
sort, uniq), and pii>ing output to a pager using less. He 
also di,misses sending oiitpui to a printer via \ Jnix ccanmands 
dps tat to look at configured printers. Ip to add print jobs 
to a f.[ueue, pr to fonnai files, enscript to translate plain 
text k> IkxsLscrijji, and atprint to send phs via AppleTalk). 

Chapter 7 explores monitoring multiple processes 
and discusses the ccmcepi of running commands as a 
background process using the & character, gathering 
running process information using ps and top, 
watching system processes througli the system logs 
using tail -£, terminating processes using kill 
and killall, and interacting with CiUi apps. 

The next cliiipler sliows ihe rciider how to access remote 
systems via ssh and rsh, enabling ^^eb and ftp servers, and 
copying files lx*tween systems using sep, rep, curl, and 
ftp/s ftp. laylor includes a brief aside on security and 
indk'ates (rfher security issues wliere appropriite. 

In Chapters 9 and 10, 'faylor introduces XI i, the X 
Window System, and how to find and install various 
open .source applications using Fink, an open source 
.software distribution and installation Ux)l for Mac OS 
X, The author includes installing, using and 
customizing Xll, and using remote access capabiltries 
of XI1. The author gives step-by-step in.stntclions t)n 
iiow to install Fink, how to list and install packages 
and how to use tlie GUI front-end to Fink, 
FinkCommander. Taylor mentions but doe.sn’t illusirate 
the Fink alternative, DarwinPorts perl laps because 
although command line junkies seem to prefer 
DarwinPorts, Fink’s GUI interface makes it easier for 
I>eginners to maneuver and there are many more 
packages available through Fink. Other useful apps 
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described; GIMP (GNU image Maaipulalion Program), 
the email client Pine, the lexi-based Web browser 
Lynx, and GNU Backgammon. Taylor takes care to give 
the reader thorough details on downloading, installing 
and using most of the apps included in the chapter* 
Pven a user completely unfamiliar with XI1 or Fink 
can feel comfortable with the process outlined in these 
two sections. 

In the final ehapLer, Taylor advises the reader on 
where to find additional resources through 
documentation (Help menus, man pages, web sites, 
and books), how to customize the Unix environment 
using aliases and functions, and programming optian.s 
(siieil scripts, AppleScript, Perl, Python, Ruby, C, and 
C++)* 'Phis is a brief chapter intended to launch the 
reader into further study. 

Learning Unix for Mac OS X Tiger follows 
O'Reilly's proven formula of providing superior books 
written by industry leaders. Font choices for lx>th regular 
text and txnnmand line examples are highly readable watli 
a large number of screenshots illustnifing key |x>inLs. 
Taylor's examples are re presen La tive of practical, I ami liar 
situations that even command line junkies will appreciate* 

In addition to an excellent introduction ro Unix for 
Tiger users, Learning Unix for Mac OS X Tiger is one 
of the best values around; readers can find this 


exceptional O'Reilly book for well under the listed 
$19.95 at a variety of book resellers* 

Dave Taylor has a comfortable and relaxed style of 
writing that lends an air of ease to this complex subject. 
There is never a moment that the reader will feel lost. 
Fadi chattier is well thought out and executed and eacli 
topic follows the previous one in a reasonal^le fashion. 
The chapters are littered witli useful examples of 
commancLs and optional switches and fiuther illustrations 
uf when they are most practically implemented* 
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280 pages 
O'Reilly 

ISBN:0596009151 
US $19*95 
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□Work Longer? DWork Harder? 

1^ Energize Your Mac! 


We know your day keeps getting longer and longer. With every release of software, your Mac is 
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CPU Upgrades for Raw Speed. We upgrade any Power Macintosh, 
any iMac Flat Panel, any PowerBook G3 and some PowerBook G4s. 

Fast and Large Storage for Real-Time Video. Our TURBOS4r>4 

solutions can make your drives perform like RAM. Projects open in a 
flash and edit in real-time. 

Extreme Wireless. Wireless is great, unless you're getting slow 
transfers. Even Airport Extreme's are stow when the signal is weak. 
Daystar can boost your signals and energize your wireless network. 

But, if You Really need a G5? Daystar is the only Mac Performance 
Manufacturer that is also an Apple Authorized Reseller. Not only can 
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Pro's can upgrade it for maximum performance! 

Call 877-439-8646 and beat the clock. 
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WITH NO QUALITY LOSS! 
BUILT FOR MAC OS X "TIGER" 
BACKUP TO .MAC, CD, & DVD 


A Division of Smith Micro Software 


Available from your favorite retailers and catalogs. Download Stuffit Expander for FREE at www.stuffit.com! 

Download a FRE trial version of Stuffit Standard Edition at www.aiiumexom. For information about Sluffit's industry'leading JPEG compression, please visit www.stuffit.com. 
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